4130 matches found
CVE-2026-72677
Relative Path Traversal CWE-23 in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal CAPEC-139. Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without rejecting relative traversal sequences. The identifier is stored...
CVE-2026-72677
Kibana Fleet is affected by a Relative Path Traversal (CWE-23) that can enable unauthorized deletion of Kibana resources. The issue arises from accepting a user-supplied Fleet Server host configuration identifier without rejecting relative traversal sequences; the identifier is stored as provided...
CVE-2026-72677
Relative Path Traversal CWE-23 in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal CAPEC-139. Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without rejecting relative traversal sequences. The identifier is stored...
EUVD-2026-58264
Relative Path Traversal CWE-23 in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal CAPEC-139. Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without rejecting relative traversal sequences. The identifier is stored...
CVE-2026-72677 Relative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other Resources
Relative Path Traversal CWE-23 in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal CAPEC-139. Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without rejecting relative traversal sequences. The identifier is stored...
Kibana 8.19.17, 9.3.6, 9.4.3 Security Update (ESA-2026-94)
Relative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other Resources Description: Relative Path Traversal CWE-23 in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal CAPEC-139. Kibana Fleet accepted a user-supplied...
CVE-2026-16263
creationtimestamp| type| source ---|---|--- 2026-08-08 15:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msldkoyjfy2u...
CVE-2026-67300
creationtimestamp| type| source ---|---|--- 2026-08-01 23:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2l56spgn2z...
JLSEC-2026-1021 ImageMagick: Heap Buffer Over-Read in distributed pixel cache server
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an attacker who can connect to a magick -distribute-cache service can cause a heap buffer over-read in the server process. This issue has been patched in versio...
CVE-2026-14512
creationtimestamp| type| source ---|---|--- 2026-07-28 23:03:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqjg6eoce2s 2026-07-28 23:48:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqlwad67k2a 2026-07-30 05:15:07+00:00| seen|...
CVE-2024-58355
creationtimestamp| type| source ---|---|--- 2026-07-23 22:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrduoauc662j 2026-07-24 03:34:13+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mreg7wzkeu2g...
CVE-2026-25800
creationtimestamp| type| source ---|---|--- 2026-07-23 22:17:29+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrdujlesmg23...
CVE-2026-49035
creationtimestamp| type| source ---|---|--- 2026-07-23 22:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdtlrt3us2w 2026-07-23 22:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrduveaath23...
CVE-2024-3501
creationtimestamp| type| source ---|---|--- 2026-07-23 21:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrdsbeucjl23...
CVE-2026-15981
creationtimestamp| type| source ---|---|--- 2026-07-23 21:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdrcxw2hw2y 2026-07-26 10:01:16+00:00| seen| https://bsky.app/profile/suriq.io/post/3mrk4rv32bq2i 2026-07-26 15:00:28+00:00| seen|...
CVE-2026-47724
creationtimestamp| type| source ---|---|--- 2026-07-23 20:58:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrdq3lhsox2k 2026-07-23 22:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdtlla4y72g...
CVE-2026-54422
creationtimestamp| type| source ---|---|--- 2026-07-23 20:03:15+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrdmzjdood2n...
CVE-2026-62515
creationtimestamp| type| source ---|---|--- 2026-07-23 18:20:35+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...