K000163580: Elasticsearch vulnerability CVE-2026-56149

Security Advisory Description Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory...

Final-project-SQL-injection-pipeline

SQL Injection Detection — Hybrid ML Pipelines Source code for the MSc dissertation: Enhancing Web Application Firewall with Machine Learning for SQL Injection Detection | ---|--- Author| Lilliane Linnet Musoke Institution| University of Reading, Department of Computer Science Programme| MSc Data...

CLEANSTART-2026-CF09659 Deserialization of Untrusted Data (CWE-502) in the Elasticsearch machine learning component can lead to remote code execution via Object Injection (CAPEC-586)

Security vulnerability affects the sonarqube package. Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine learning component can lead to remote code execution via Object Injection CAPEC-586...

Losing gamblers pushed to bet more by DraftKings’ AI, report says

Two separate investigations have raised concerns about betting site DraftKings’ marketing to target problem gamblers, including its use of AI. On September 19, the New York Times reported that the company’s machine learning model targeted people who were more likely to respond to betting promotio...

Weaponizing Ground Truth: Data Poisoning Attacks by Exploiting Boundary Misalignment between Antivirus Software and Learning-Based Detectors

Machine-learning ML-based malware detectors are commonly trained using labels obtained from antivirus AV engines and aggregation services e.g., VirusTotal. This practice assumes AV-generated labels provide reliable supervision. However, small byte-level modifications can substantially alter AV...

The vulnerability of the Machine Learning plugin of the Kibana data visualization service allows a attacker to compromise the integrity of the protected information.

The vulnerability of the Machine Learning plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity of the protected information...

The vulnerability of the machine learning function of the Kibana data visualization service, which allows a intruder to trigger a service failure.

The vulnerability of the Machine Learning function of the Kibana data visualization service is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Blockchain-Enabled Artificial Intelligence and AI Agents for Secure Data Sharing and Cybersecurity Applications

Blockchain and artificial intelligence AI are converging into a single infrastructural layer for securing data sharing, model integrity, and autonomous decision-making across distributed systems. This paper presents a meta-synthesis that draws together four constituent studies covering adversaria...

[SECURITY] Fedora 45 Update: mivisionx-7.2.1-5.fc45

MIVisionX toolkit is a set of comprehensive computer vision and machine intelligence libraries, utilities, and applications bundled into a single toolkit. AMD MIVisionX delivers highly optimized conformant open-source implementation of the Khronos OpenVX=E2=84=A2 and OpenVX=E2=84=A2 Extensions...

Multi-View Fusion for Encrypted C2 Detection: A Leakage-Controlled Measurement Study of Evaluation Pitfalls

Command-and-control C2 traffic increasingly hides within TLS, so defenders now apply machine learning to traffic metadata. Many studies assume that combining two metadata views, namely flow statistics and TLS handshake fingerprints, improves both accuracy and robustness. We tested this assumption...

EUVD-2026-82587

Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network...

CVE-2026-68791

Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network...

CVE-2026-68791

CVE-2026-68791 is an incorrect authorization vulnerability in Azure Machine Learning that allows an unauthenticated, network-based attacker to disclose information with HIGH severity (CVSS 3.1: 8.6). The attack requires no prior privileges or user interaction, and the scope is CHANGED , indicatin...

Azure Machine Learning Information Disclosure Vulnerability

Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network...

PT-2026-95166

Name of the Vulnerable Software and Affected Versions Azure Machine Learning affected versions not specified Description Incorrect authorization allows an unauthorized attacker to disclose information over a network. Recommendations At the moment, there is no information about a newer version tha...

CVE-2026-68791: Incorrect Authorization

Incorrect authorization in Azure Machine Learning allows an unauthorized attacker to disclose information over a network...

CVE-2026-83071

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Machine Learning. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

EUVD-2026-79399

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Machine Learning. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...

CVE-2026-83071

Oracle Business Intelligence Enterprise Edition (part of Oracle Analytics) has a vulnerability in its Machine Learning component affecting versions 8.2.0.0.0 and 26.01.0.0.0 . The flaw is locally exploitable with low privileges and no user interaction, allowing an attacker with logon access to th...

CVE-2026-83071: Improper Access Control

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Machine Learning. Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where...