Lucene search
K

8 matches found

Packet Storm
Packet Storm
added 2026/04/23 12:0 a.m.51 views

📄 Forcepoint One Endpoint macOS 25.08.5008 Forcepoint DLP Endpoint Process Suspension Bypass

This Metasploit auxiliary module targets Forcepoint Data Loss Prevention DLP Endpoint on macOS and attempts to manipulate or suspend related security processes. ================================================================================================================================== | Tit...

5.8AI score
Exploits0
NVD
NVD
added 2026/03/19 6:16 p.m.1 views

CVE-2026-26939

Missing Authorization CWE-862 in Kibana’s server-side Detection Rule Management can lead to Unauthorized Endpoint Response Action Configuration host isolation, process termination, and process suspension via CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs. This requires an...

6.5CVSS0.00042EPSS
Exploits0References1
CVE
CVE
added 2026/03/19 5:11 p.m.9 views

CVE-2026-26939

CVE-2026-26939 affects Kibana’s server-side Detection Rule Management. Missing Authorization (CWE-862) could allow an authenticated attacker with rule management privileges to configure Unauthorized Endpoint Response Actions (host isolation, process termination, process suspension). Root cause an...

6.5CVSS5.8AI score0.00042EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/19 5:11 p.m.1 views

CVE-2026-26939

Missing Authorization CWE-862 in Kibana’s server-side Detection Rule Management can lead to Unauthorized Endpoint Response Action Configuration host isolation, process termination, and process suspension via CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs. This requires an...

6.5CVSS5.8AI score0.00042EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/19 5:11 p.m.0 views

CVE-2026-26939 Missing Authorization in Kibana Leading to Unauthorized Endpoint Response Action Configuration

Missing Authorization CWE-862 in Kibana’s server-side Detection Rule Management can lead to Unauthorized Endpoint Response Action Configuration host isolation, process termination, and process suspension via CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs. This requires an...

6.5CVSS5.8AI score0.00042EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/19 5:11 p.m.15 views

CVE-2026-26939 Missing Authorization in Kibana Leading to Unauthorized Endpoint Response Action Configuration

Missing Authorization CWE-862 in Kibana’s server-side Detection Rule Management can lead to Unauthorized Endpoint Response Action Configuration host isolation, process termination, and process suspension via CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs. This requires an...

6.5CVSS0.00042EPSS
Exploits0References1
Snyk
Snyk
added 2026/03/19 5:11 p.m.1 views

Missing Authorization

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Missing Authorization in the Detection Rule Management. An attacker can perform unauthorized system actions, such as host isolatio...

7.1CVSS5.9AI score0.00042EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/11/16 12:0 a.m.13 views

Fedora 40 : webkitgtk (2024-4d940908db)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-4d940908db advisory. Update to WebKitGTK 2.46.3: Flatten layers to a plane when preseve-3d style is set. Fix DuckDuckGo links by adding a user agent quirk. Fix several...

5.4CVSS6.6AI score0.00664EPSS
Exploits0References3
Rows per page
Query Builder