今日共收录 1589 条安全情报，包含 784 个 CVE，406 篇安全通告，以及 115 篇研究论文。
← 返回归档列表CVE-2026-72683
A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API en
CVE-2026-72681
Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate Kiba
CVE-2026-72680
Kibana Agent Builder A2A JSON-RPC API endpoint derives the identifier of a stored conversation from a user-supplied inpu
CVE-2026-72679
Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an interva
CVE-2026-72678
Elasticsearch does not validate a size value taken from a user-supplied input before that value is used to reserve memor
CVE-2026-72677
Relative Path Traversal (CWE-23) in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path T
CVE-2026-72676
Improper Control of Generation of Code ('Code Injection') (CWE-94) in Fleet Server can lead to the execution of attacker
CVE-2026-72675
Missing Authorization (CWE-862) in Kibana can lead to cross-space information disclosure and unauthorized data modificat
CVE-2026-72674
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive A
CVE-2026-72673
Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized deletion of Synthetics private locations via Access
CVE-2026-72672
The Elastic Security capability that suggests existing field values while a user authors endpoint policy artifacts queri
CVE-2026-72671
A Kibana Machine Learning capability that removes a saved object from the current space accepts machine learning trained
CVE-2026-72670
A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a confi
CVE-2026-72669
The state that Kibana stores for an Observability Onboarding flow is not bound to the user who created the flow, and the
CVE-2026-72667
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive A
CVE-2026-72666
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized query execution against El
CVE-2026-72665
Missing Authorization (CWE-862) in Kibana can lead to unauthorized execution of Osquery and Elastic Defend response acti
CVE-2026-72664
Missing Authorization (CWE-862) in Kibana can lead to unauthorized execution of Elastic Defend response actions on manag
CVE-2026-72663
Inefficient Algorithmic Complexity (CWE-407) in Kibana can lead to denial of service via Input Data Manipulation (CAPEC-
CVE-2026-72661
Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Co