CVE-2026-72631

Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...

CVE-2026-72631 Improper Privilege Management in Kibana Fleet Leading to Over-Scoped Elastic Agent API Keys

Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...

CVE-2026-72631

Kibana Fleet vulnerability CVE-2026-72631: Improper Privilege Management can allow an Elastic Agent API key issued to agents in a policy to gain additional write rights (insert new documents and extend index mappings) for certain indices by including extra data streams in the integration policy. ...

PT-2026-71753

Name of the Vulnerable Software and Affected Versions Kibana Fleet affected versions not specified Description Improper privilege management in Kibana Fleet allows for privilege escalation. This occurs when an integration policy declares extra data streams for writing, which Fleet then adds to th...

CVE-2026-34496

Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue affects victor Web: before 7.1...

OESA-2026-2279 systemd security update

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. Security Fixes: In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.CVE-2026-40226...

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

...

SUSE CVE-2026-40226

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file...

EUVD-2026-21400

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file...

CVE-2026-40226

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file...

CVE-2026-40226

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file...

CVE-2026-40226

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file...

Malicious code in elf-stats-peppermint-candy-233 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c09927fc4405be586a497798b2c60e046f755a35dace2f3031161b6e772800 The package elf-stats-peppermint-candy-233 was found to contain malicious code...

MAL-2025-192112 Malicious code in elf-stats-peppermint-candy-233 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c09927fc4405be586a497798b2c60e046f755a35dace2f3031161b6e772800 The package elf-stats-peppermint-candy-233 was found to contain malicious code...

EUVD-2014-2042

Malware in sbrugna...

Malicious code in 233-misc (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4724 Malicious code in 233-misc (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2023-233)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-233 advisory. An issue was found in the Linux kernel's IPv6 TCP connection tracking code, which could lead to high CPU usage with certain traffic patterns. CVE-2023-1206 Tenable has extracted the preceding descriptio...

多款Baicells Nova产品跨站脚本漏洞

Baicells Nova 227 is a miniature base station.Baicells Nova 233 is a miniature base station.Baicells Nova 243 is a miniature base station. A security vulnerability exists in the Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB firmware version RTS/RTD 3.6.6, which originates from a...

多款Baicells Nova产品信任管理问题漏洞

Baicells Nova 227 is a miniature base station.Baicells Nova 233 is a miniature base station.Baicells Nova 243 is a miniature base station. A trust management issue vulnerability exists in the Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB device firmware prior to RTS/RTD 3.7.11.6. The...