Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 13:38:18 +0000 BIT-elk-2026-78593 — Improper Control of Generation of Code in Kibana Leading to Privilege Escalation https://db.gcve.eu/vuln/bit-elk-2026-78593 <p><strong>Affected:</strong> Bitnami: elk</p> <p>An insufficiently validated configuration field in Kibana&#39;s Cribl integration allows an authenticated user holding Kibana Fleet management privileges to inject attacker-controlled expressions into a server-side script template, resulting in an Elasticsearch ingest pipeline being written beyond the caller&#39;s authorized Elasticsearch permissions.</p> <p><strong>Affected:</strong> Bitnami: elk</p> <p>An insufficiently validated configuration field in Kibana&#39;s Cribl integration allows an authenticated user holding Kibana Fleet management privileges to inject attacker-controlled expressions into a server-side script template, resulting in an Elasticsearch ingest pipeline being written beyond the caller&#39;s authorized Elasticsearch permissions.</p> https://db.gcve.eu/vuln/bit-elk-2026-78593 certfr-2026-avi-1113 — De multiples vulnérabilités ont été découvertes dans Elastic Kibana. Certaines d'entre elles permettent à un attaquant… https://db.gcve.eu/vuln/certfr-2026-avi-1113 certfr-2026-avi-1113 https://db.gcve.eu/vuln/certfr-2026-avi-1113 fkie_cve-2026-78593 https://db.gcve.eu/vuln/fkie_cve-2026-78593 <p>An insufficiently validated configuration field in Kibana&#39;s Cribl integration allows an authenticated user holding Kibana Fleet management privileges to inject attacker-controlled expressions into a server-side script template, resulting in an Elasticsearch ingest pipeline being written beyond the caller&#39;s authorized Elasticsearch permissions.</p> <p>An insufficiently validated configuration field in Kibana&#39;s Cribl integration allows an authenticated user holding Kibana Fleet management privileges to inject attacker-controlled expressions into a server-side script template, resulting in an Elasticsearch ingest pipeline being written beyond the caller&#39;s authorized Elasticsearch permissions.</p> https://db.gcve.eu/vuln/fkie_cve-2026-78593 GHSA-6q7w-4cg4-7827 https://db.gcve.eu/vuln/ghsa-6q7w-4cg4-7827 <p>An insufficiently validated configuration field in Kibana&#39;s Cribl integration allows an authenticated user holding Kibana Fleet management privileges to inject attacker-controlled expressions into a server-side script template, resulting in an Elasticsearch ingest pipeline being written beyond the caller&#39;s authorized Elasticsearch permissions.</p> <p>An insufficiently validated configuration field in Kibana&#39;s Cribl integration allows an authenticated user holding Kibana Fleet management privileges to inject attacker-controlled expressions into a server-side script template, resulting in an Elasticsearch ingest pipeline being written beyond the caller&#39;s authorized Elasticsearch permissions.</p> https://db.gcve.eu/vuln/ghsa-6q7w-4cg4-7827