CVE-2026-49096 Uncaught Exception in Kibana Cases Leading to Denial of Service

Uncaught Exception CWE-248 in Kibana Cases can lead to denial of service via Input Data Manipulation CAPEC-153. Malformed link syntax stored in a case comment was not rejected or sanitized when the comment was later formatted for display, and the resulting unhandled error prevented the affected...

CVE-2026-49096

CVE-2026-49096 affects Kibana Cases. The issue is an Uncaught Exception (CWE-248) triggered by malformed link syntax stored in a case comment and later rendered, causing a denial of service where the affected case becomes inaccessible to all users until the comment is removed. Affected products/c...

CVE-2026-72660

Kibana is affected by CVE-2026-72660 due to an Uncaught Exception (CWE-248) from Improper Input Validation (CWE-20) that can cause a Denial of Service (CAPEC-153). An authenticated Kibana account with at least read access and the ability to write to an Elasticsearch index can trigger an internal ...

CVE-2026-72660 Uncaught Exception in Kibana Leading to Denial of Service

Uncaught Exception CWE-248, resulting from Improper Input Validation CWE-20, in Kibana can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged access can cause an internal error condition in Kibana by supplying specially crafted data...

CVE-2026-72660 Uncaught Exception in Kibana Leading to Denial of Service

Uncaught Exception CWE-248, resulting from Improper Input Validation CWE-20, in Kibana can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged access can cause an internal error condition in Kibana by supplying specially crafted data...

CVE-2026-72660

Uncaught Exception CWE-248, resulting from Improper Input Validation CWE-20, in Kibana can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged access can cause an internal error condition in Kibana by supplying specially crafted data...

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

JLSEC-2026-1318

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an uncaught exception was found in Exiv2. The vulnerability is in the preview component, which is only triggered when running Exiv2 with an extra...

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

Kibana 8.19.20, 9.3.8, and 9.4.5 Security Update (ESA-2026-101)

Uncaught Exception in Kibana Leading to Denial of Service Description: Uncaught Exception CWE-248, resulting from Improper Input Validation CWE-20, in Kibana can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged access can cause an...

Kibana 8.19.20, 9.3.5, 9.4.2 Security Update (ESA-2026-136)

Uncaught Exception in Kibana Cases Leading to Denial of Service Uncaught Exception CWE-248 in Kibana Cases can lead to denial of service via Input Data Manipulation CAPEC-153. Malformed link syntax stored in a case comment was not rejected or sanitized when the comment was later formatted for...

PT-2026-71772

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Improper input validation allows an authenticated user with low-privileged access to trigger an internal error condition by providing specially crafted data. This results in an uncaught...

CVE-2026-73418 NextAuth.js: getToken() throws an uncaught exception on malformed Bearer authorization headers

NextAuth.js provides authentication for Next.js. Prior to @auth/core 0.41.3 and next-auth 4.24.15 and 5.0.0-beta.32, the exported getToken helper in the next-auth/jwt and @auth/core/jwt modules can throw an uncaught exception when it reads a malformed Authorization: Bearer header. When no session...

Linux Distros Unpatched Vulnerability : CVE-2026-62909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncaught exception in .NET allows an authorized attacker to elevate privileges locally. CVE-2026-62909 Note that Nessus relies on the presence of the package as...

CVE-2026-62909

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

UBUNTU-CVE-2026-62909

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-20775

Uncaught exception for some IntelR TDX modules within Ring 0: Trust Domain may allow a denial of service. System software adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requiremen...