https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T13:37:47.010603+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/bit-elk-2026-78596 BIT-elk-2026-78596 — Missing Authorization in Kibana Leading to Unauthorized Cross-Space Write Operations 2026-09-28T13:37:47.039156+00:00

Affected: Bitnami: elk

Missing Authorization in Kibana Leading to Unauthorized Modification of Data / Missing Authorization (CWE-862) in Kibana can lead to unauthorized modification of data via Privilege Abuse (CAPEC-122). An authenticated user holding Security read-level access in a single Kibana space could trigger Entity Analytics migration operations that perform privileged writes across all Kibana spaces, regardless of that user's actual access scope.

 https://db.gcve.eu/vuln/certfr-2026-avi-1113 certfr-2026-avi-1113 — De multiples vulnérabilités ont été découvertes dans Elastic Kibana. Certaines d'entre elles permettent à un attaquant… 2026-09-28T13:37:47.039237+00:00 certfr-2026-avi-1113 https://db.gcve.eu/vuln/fkie_cve-2026-78596 fkie_cve-2026-78596 2026-09-28T13:37:47.039272+00:00

Missing Authorization in Kibana Leading to Unauthorized Modification of Data / Missing Authorization (CWE-862) in Kibana can lead to unauthorized modification of data via Privilege Abuse (CAPEC-122). An authenticated user holding Security read-level access in a single Kibana space could trigger Entity Analytics migration operations that perform privileged writes across all Kibana spaces, regardless of that user's actual access scope.

 https://db.gcve.eu/vuln/ghsa-fcr2-g7h7-m264 GHSA-fcr2-g7h7-m264 2026-09-28T13:37:47.039310+00:00

Missing Authorization in Kibana Leading to Unauthorized Modification of Data / Missing Authorization (CWE-862) in Kibana can lead to unauthorized modification of data via Privilege Abuse (CAPEC-122). An authenticated user holding Security read-level access in a single Kibana space could trigger Entity Analytics migration operations that perform privileged writes across all Kibana spaces, regardless of that user's actual access scope.