PT-2026-32431

Incorrect Authorization CWE-863 in Kibana can lead to cross-space information disclosure via Privilege Abuse CAPEC-122. A user with Fleet agent management privileges in one Kibana space can retrieve Fleet Server policy details from other spaces through an internal enrollment endpoint. The endpoin...

CVE-2026-2172

The CVE concerns code-projects Online Application System for Admission 1.0. The vulnerability is in the enrollment/index.php file of the Login Endpoint and is exploitable by manipulating input to cause SQL injection. It can be triggered remotely and the exploit has been publicly disclosed. Multip...