CVE-2018-11761

Summary In a recent research on Apache Tika, I found a DOS Denial of Service vulnerability existed on its XML parser. It is caused that the parser improperly parses XML document. Affected Version Tested on ElasticSearch 6.3.1 using Tika 1.18 and 6.2.3 using Tika 1.17 Analysis As we know, the core...

ecs-mapping

Corelight ECS Ingest Pipeline The repository is compromised of Ingest Pipeline files required to be used with the installer script in the repository https://github.com/corelight/ecs-templates The installer in that repository will download the files from this repository therefore using this...

ecs-mapping

Pipeline di Ingest ECS di Corelight Il repository è composto da file di Ingest Pipeline necessari per l'utilizzo con lo script di installazione presente nel repository https://github.com/corelight/ecs-templates L'installer in quel repository scaricherà i file da questo repository, pertanto...

CLEANSTART-2026-GB20617 Incorrect Authorization (CWE-863) in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authorization controls in the ingest simulation feature

Security vulnerability affects the sonarqube package. Incorrect Authorization CWE-863 in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authorization controls in the ingest simulation feature...

ai4rag (>=0.9.0, <=0.10.4), distlk (0.1.0rc1) +3 more potentially affected by CVE-2026-105751 via docling (>=2.107.0, <=2.118.1)

docling PYPI version =2.107.0, =0.9.0, =0.3.0, =0.3.0, =0.3.2 Source cves: CVE-2026-105751 Source advisory: SNYK:PYTHON-DOCLING-20537234...

io.kestra.plugin:plugin-jdbc-snowflake (0.9.0), io.squashql:squashql-snowflake (>=1.1.0, <=1.3.1) +9 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.30)

net.snowflake:snowflake-jdbc MAVEN version 3.13.30 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.kestra.plugin:plugin-jdbc-snowflake 0.9.0 - io.squashql:squashql-snowflake =1.1.0, =2.0.1,...

io.trino:trino-iceberg (>=454, <=456), io.trino:trino-snowflake (>=454, <=456) +7 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.18.0)

net.snowflake:snowflake-jdbc MAVEN version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.trino:trino-iceberg =454, =454, =2.2.1, =10.6.19, =0.1.0, =16.22.1, =16.22.1, =16.22.1, =16.22.1,...

net.snowflake:snowflake-ingest-sdk (>=4.3.0-unshaded, <=4.4.2-unshaded) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc-thin (3.25.1)

net.snowflake:snowflake-jdbc-thin MAVEN version 3.25.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc-thin and may be impacted: - net.snowflake:snowflake-ingest-sdk =4.3.0-unshaded, =4.4.2-unshaded Source cves:...

net.snowflake:snowflake-ingest-sdk (0.9.1) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.6.6)

net.snowflake:snowflake-jdbc MAVEN version 3.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - net.snowflake:snowflake-ingest-sdk 0.9.1 Source cves: CVE-2026-86597 Source advisory:...

io.rtdi.appcontainer:snowflakerealm (>=0.9.2, <=0.9.3), net.snowflake:snowflake-ingest-sdk (1.1.0-unshaded) +3 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.15)

net.snowflake:snowflake-jdbc MAVEN version 3.13.15 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.rtdi.appcontainer:snowflakerealm =0.9.2, =16.16.12, =16.16.12, =16.16.12, =16.16.14 Source cves:...

com.codbex.atlas:codbex-atlas-application (>=1.4.0, <=2.1.0), com.codbex.hades:codbex-hades-application (>=1.6.0, <=2.1.0) +17 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.22.0)

net.snowflake:snowflake-jdbc MAVEN version 3.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.codbex.atlas:codbex-atlas-application =1.4.0, =1.6.0, =2.0.0, =1.6.0, =1.4.0, =1.3.0, =1.6.0, =470...

io.github.zoom-dustin-moriarty:zoom-data-fence (1.0.0), net.snowflake:snowflake-ingest-sdk (>=4.0.1-unshaded, <=4.1.0-unshaded) +1 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc-thin (3.24.2)

net.snowflake:snowflake-jdbc-thin MAVEN version 3.24.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc-thin and may be impacted: - io.github.zoom-dustin-moriarty:zoom-data-fence 1.0.0 - net.snowflake:snowflake-ingest-sdk...

net.snowflake:snowflake-ingest-sdk (>=3.1.2-beta.unshaded, <=4.0.0-unshaded) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc-thin (3.22.0)

net.snowflake:snowflake-jdbc-thin MAVEN version 3.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc-thin and may be impacted: - net.snowflake:snowflake-ingest-sdk =3.1.2-beta.unshaded, =4.0.0-unshaded Source cves:...

net.snowflake:snowflake-ingest-sdk (0.9.0) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.0.0)

net.snowflake:snowflake-jdbc MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - net.snowflake:snowflake-ingest-sdk 0.9.0 Source cves: CVE-2026-86597 Source advisory:...

Chromium CVE-2026-91718: Use after free

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...

BIT-ELK-2026-78593 Improper Control of Generation of Code in Kibana Leading to Privilege Escalation

An insufficiently validated configuration field in Kibana's Cribl integration allows an authenticated user holding Kibana Fleet management privileges to inject attacker-controlled expressions into a server-side script template, resulting in an Elasticsearch ingest pipeline being written beyond th...

io.github.zoom-dustin-moriarty:zoom-data-fence (1.0.0), net.snowflake:snowflake-ingest-sdk (>=4.0.1-unshaded, <=4.4.2-unshaded) +7 more potentially affected by CVE-2026-86600 via net.snowflake:snowflake-jdbc-thin (>=3.24.2, <=4.3.2)

net.snowflake:snowflake-jdbc-thin MAVEN version =3.24.2, =4.0.1-unshaded, =2.7.0, =2.7.0, =2.7.0, =2.7.0, =2.7.0, =2.7.0, =1.0.0, =3.4.0 Source cves: CVE-2026-86600 Source advisory: MEND:CVE-2026-86600...

io.github.zoom-dustin-moriarty:zoom-data-fence (1.0.0), net.snowflake:snowflake-ingest-sdk (>=3.1.2-beta.unshaded, <=4.4.2-unshaded) +7 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc-thin (>=3.22.0, <=4.3.2)

net.snowflake:snowflake-jdbc-thin MAVEN version =3.22.0, =3.1.2-beta.unshaded, =2.7.0, =2.7.0, =2.7.0, =2.7.0, =2.7.0, =2.7.0, =1.0.0, =3.4.0 Source cves: CVE-2026-86597 Source advisory: MEND:CVE-2026-86597...

deadair v0.8.0

deadair checks whether enabled SIEM detections still have the telemetry they need. It reports missing or stale data, ingest delays, and schema mismatches. Runs locally · Read-only · No agent · No telemetry upload Read the technical write-up · Featured in Detection Engineering Weekly · Featured in...

io.github.zoom-dustin-moriarty:zoom-data-fence (1.0.0), net.snowflake:snowflake-ingest-sdk (>=3.1.2-beta.unshaded, <=4.4.2-unshaded) +7 more potentially affected by CVE-2026-85525 via net.snowflake:snowflake-jdbc-thin (>=3.22.0, <=4.3.2)

net.snowflake:snowflake-jdbc-thin MAVEN version =3.22.0, =3.1.2-beta.unshaded, =2.7.0, =2.7.0, =2.7.0, =2.7.0, =2.7.0, =2.7.0, =1.0.0, =3.4.0 Source cves: CVE-2026-85525 Source advisory: MEND:CVE-2026-85525...