Lucene search
+L

2 matches found

Vulnrichment
Vulnrichment
added 2026/09/02 2:43 p.m.5 views

CVE-2026-78587 Incorrect Authorization in Fleet Server Leading to Denial of Service of Agent Upload Operations

Incorrect Authorization CWE-863 in Fleet Server can lead to a denial of service of agent upload operations via Privilege Abuse CAPEC-122. Fleet Server does not correctly verify session ownership during multi-part data upload operations, allowing any authenticated agent to interfere with the activ...

3.1CVSS5.9AI score
SaveExploits0References1
Elastic
Elastic
added 2026/09/01 10:36 p.m.9 views

Fleet Server 8.19.16, 9.3.5, 9.4.2 Security Update (ESA-2026-164)

Incorrect Authorization in Fleet Server Leading to Denial of Service of Agent Upload Operations Incorrect Authorization CWE-863 in Fleet Server can lead to a denial of service of agent upload operations via Privilege Abuse CAPEC-122. Fleet Server does not correctly verify session ownership during...

3.1CVSS5.8AI score
SaveExploits0
Rows per page
Query Builder