The Elastic Security capability that suggests existing field values while a user authors endpoint...
CVE-2026-72672
The Elastic Security capability that suggests existing field values while a user authors endpoint policy artifacts queri
#advisory
共收录 23530 条相关情报。
← 返回所有主题Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern...
CVE-2026-72679
Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an interva
Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized deletion of Synthetics...
CVE-2026-72673
Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized deletion of Synthetics private locations via Access
Missing Authorization (CWE-862) in Kibana can lead to unauthorized execution of Elastic Defend...
CVE-2026-72664
Missing Authorization (CWE-862) in Kibana can lead to unauthorized execution of Elastic Defend response actions on manag
Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Accessing...
CVE-2026-72661
Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Co
Inefficient Algorithmic Complexity (CWE-407) in Kibana can lead to denial of service via Input...
CVE-2026-72663
Inefficient Algorithmic Complexity (CWE-407) in Kibana can lead to denial of service via Input Data Manipulation (CAPEC-
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized...
CVE-2026-72666
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized query execution against El
A lower privileged user who holds only the privilege to read agent policies can read the entire...
CVE-2026-72670
A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a confi
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of...
CVE-2026-72659
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive All
A Kibana Machine Learning capability that removes a saved object from the current space accepts...
CVE-2026-72671
A Kibana Machine Learning capability that removes a saved object from the current space accepts machine learning trained
Uncaught Exception (CWE-248), resulting from Improper Input Validation (CWE-20), in Kibana can...
CVE-2026-72660
Uncaught Exception (CWE-248), resulting from Improper Input Validation (CWE-20), in Kibana can lead to denial of service
Cross-Site Request Forgery (CWE-352) in Kibana can lead to privilege escalation via Cross Site...
CVE-2026-72658
Cross-Site Request Forgery (CWE-352) in Kibana can lead to privilege escalation via Cross Site Request Forgery (CAPEC-62
Missing Authorization (CWE-862) in Kibana can lead to unauthorized execution of Osquery and...
CVE-2026-72665
Missing Authorization (CWE-862) in Kibana can lead to unauthorized execution of Osquery and Elastic Defend response acti
The state that Kibana stores for an Observability Onboarding flow is not bound to the user who...
CVE-2026-72669
The state that Kibana stores for an Observability Onboarding flow is not bound to the user who created the flow, and the
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of...
CVE-2026-72667
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive A
The Elastic Cloud on Kubernetes (ECK) operator reads a list of secret references from an...
CVE-2026-72640
The Elastic Cloud on Kubernetes (ECK) operator reads a list of secret references from an annotation on secrets it manage
Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of...
CVE-2026-72645
Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Alloc
Authorization Bypass Through User-Controlled Key (CWE-639) in Fleet Server can lead to...
CVE-2026-72657
Authorization Bypass Through User-Controlled Key (CWE-639) in Fleet Server can lead to information disclosure via Manipu
Improperly Controlled Modification of Dynamically-Determined Object Attributes (CWE-915) in the...
CVE-2026-72655
Improperly Controlled Modification of Dynamically-Determined Object Attributes (CWE-915) in the case management function
FreePBX: Unauthenticated SQL injection in FreePBX missedcall via inbound Caller ID name leads to administrator takeover
CVE-2026-73663
FreePBX is an open source IP PBX. From 16.0.0 until 16.0.11 and 17.0.4, the FreePBX missedcall module places the inbound