CVE-2026-63141 Missing Authorization in Kibana Leading to Unauthorized Access to Cloud Connect Management Functions

Missing Authorization CWE-862 in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints...

wazuh

This repository is an open-source security platform called Wazuh, which provides unified XDR and SIEM protection for endpoints and cloud workloads. The repository contains various files and templates for issue reporting, testing, and integration with external services. The probable entry points f...

elastic-endpoint-driver.sys Code Execution

The vulnerability of the elastic-endpoint-driver.sys driver, a software component used for protecting Elastic Endpoint Detection and Response EDR endpoints, is related to pointer aliasing errors. Exploiting this vulnerability allows an attacker to execute arbitrary code and trigger service failur...

Cisco Advanced Malware Protection for Endpoints DoS

The vulnerability of the Cisco Advanced Malware Protection for Endpoints system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to trigger a service failure...