Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 11:31:20 +0000 bdu:2026-15209 https://vulnerability.circl.lu/vuln/bdu:2026-15209 bdu:2026-15209 https://vulnerability.circl.lu/vuln/bdu:2026-15209 CVE-2026-33458 — Server-Side Request Forgery (SSRF) in Kibana One Workflow Leading to Information Disclosure https://vulnerability.circl.lu/vuln/cve-2026-33458 <p><strong>Affected:</strong> Elastic Kibana</p> <p>Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data.</p> <p><strong>Affected:</strong> Elastic Kibana</p> <p>Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data.</p> https://vulnerability.circl.lu/vuln/cve-2026-33458