PT-2026-71786

Improper Control of Generation of Code 'Code Injection' CWE-94 in Fleet Server can lead to the execution of attacker-supplied script content via Code Injection CAPEC-242. Kibana accepted an identifier for an output configuration without restricting it to safe characters. That identifier is later...

PT-2026-71785

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Missing authorization in Kibana Machine Learning allows for cross-space information disclosure and unauthorized data modification. The system performs Elasticsearch operations using elevated...

IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.9 (7283488)

The version of IBM WebSphere Application Server Liberty running on the remote host is affected by a vulnerability as referenced in the 7283488 advisory. - IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled...

PT-2026-71494

Stored Cross-site Scripting CWE-79 in the user management component in maalfer Pentestify before 1.1.1 allows an authenticated attacker to execute arbitrary JavaScript in the browser of another authenticated user via a crafted username, because the frontend escapes the username with escapeHTML...

PT-2026-71770

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Cross-Site Request Forgery CSRF allows a user with permissions to create visualizations to save a specially crafted Vega visualization. When another user opens this visualization, it triggers...

PT-2026-76573

Name of the Vulnerable Software and Affected Versions Etherpad versions 2.1.0 through 3.0.0 Description Etherpad fails to properly sanitize the x-proxy-path request header, leading to two distinct issues when client-supplied headers reach the server. First, in src/node/hooks/express/admin.ts, the...

PT-2026-71754

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An observable discrepancy in Kibana Fleet allows for information disclosure through excavation. While Fleet removes the Elasticsearch API key value of an enrolled Elastic Agent from agent...

PT-2026-71751

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An authorization bypass occurs due to a user-controlled key, allowing unauthorized cross-space access because functionality is not properly constrained by Access Control Lists ACLs. This issue...

PT-2026-71765

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An authenticated user with read-only privileges to the alerting feature can cause a denial of service by submitting a specially crafted, malformed payload. This leads to excessive resource...

PT-2026-71413

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor...

PT-2026-71771

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An issue exists where a Kibana visualization feature does not correctly validate malformed payloads submitted by authenticated users with low-privileged access. This leads to unbounded memory...

PT-2026-71775

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Missing authorization allows a user with only detection rule authoring privileges for the Elastic Security solution to associate automated endpoint response actions with a detection rule. This...

PT-2026-75934

Summary Vault token and secret values are exposed in thrown errors when using hashi-vault-js. Details Every API method in Vault.js executes throw parseAxiosErrorerr, which returns the raw AxiosError untouched. That error carries the full Axios configuration, including the X-Vault-Token header and...

PT-2026-71460

A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a local unprivileged user to perform a symlink attack. By creating a symlink in a world-writable directory, an attacker can redirect privileged writes to an arbitrary file during scri...

PT-2026-71411

CWE-284: Improper Access Control...

PT-2026-71417

CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control...

PT-2026-71415

CWE-284: Improper Access Control...

PT-2026-71774

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Inefficient Algorithmic Complexity in Kibana allows for a denial of service through input data manipulation. A specially crafted, deeply nested expression submitted to a Kibana TSVB...

PT-2026-71766

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An authenticated user with permissions to manage maintenance windows can cause a denial of service by submitting a specially crafted, malformed payload. This leads to excessive resource...

PT-2026-71755

Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description Uncontrolled Recursion in the wildcard matching helper can lead to a denial of service via Excessive Allocation. The matcher used to resolve wildcard patterns against names is implement...