155 matches found
CVE-2026-63141
Missing Authorization CWE-862 in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints...
CVE-2026-63141 Missing Authorization in Kibana Leading to Unauthorized Access to Cloud Connect Management Functions
Missing Authorization CWE-862 in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints...
CVE-2026-63141
This CVE (CVE-2026-63141) concerns Missing Authorization (CWE-862) in Kibana’s Cloud Connect feature. An authenticated user can access and modify Cloud Connect configuration and service settings via insufficiently protected endpoints. Affected versions include Kibana 9.3.x (9.3.0–9.3.7) and 9.4.x...
CVE-2026-63141
Missing Authorization CWE-862 in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints...
Kibana 9.3.8, 9.4.4 Security Update (ESA-2026-65)
Missing Authorization in Kibana Leading to Unauthorized Access to Cloud Connect Management Functions Missing Authorization CWE-862 in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct...
PT-2026-62410
Missing Authorization CWE-862 in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints...
CVE-2023-29128
A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 All versions = V2.0 = V2.0 V2.1. The filename in the upload feature of the web based management of the affected device is susceptible to a path traversal vulnerability. This could allow an authenticated privileged remote attacke...
CVE-2023-29106
A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 All versions = V2.0 = V2.0 V2.1. The export endpoint is accessible via REST API without authentication. This could allow an unauthenticated remote attacker to download the files available via the endpoint...
CVE-2023-29103
A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 All versions = V2.0 = V2.0 V2.1, SIMATIC Cloud Connect 7 CC716 All versions V2.1. The affected device uses a hard-coded password to protect the diagnostic files. This could allow an authenticated attacker to access protected dat...
CVE-2023-29107
A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 All versions = V2.0 = V2.0 V2.1. The export endpoint discloses some undocumented files. This could allow an unauthenticated remote attacker to gain access to additional information resources...
EUVD-2023-32710
Malicious code in bioql PyPI...
EUVD-2023-32464
Malicious code in bioql PyPI...
EUVD-2023-32708
Malicious code in bioql PyPI...
EUVD-2023-32731
Malicious code in bioql PyPI...
EUVD-2023-32707
Malicious code in bioql PyPI...
EUVD-2025-16047
Malicious code in bioql PyPI...
EUVD-2025-23883
Malicious code in bioql PyPI...
EUVD-2023-32709
Malicious code in bioql PyPI...
EUVD-2023-32706
Malicious code in bioql PyPI...
CISA Releases Four Industrial Control Systems Advisories
CISA released four Industrial Control Systems ICS advisories on August 19, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-231-01 Siemens Desigo CC Product Family and SENTRON Powermanager ICSA-25-231-02 Siemen...