Threats Tagged 'bit-elk-2026-72677'
View all threats tagged with 'bit-elk-2026-72677'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'bit-elk-2026-72677'
Click on any threat for detailed analysis and mitigation recommendations
Elk: Relative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other Resources (CVE-2026-72677)CVE-2026-72677 0 A Relative Path Traversal vulnerability in Kibana Fleet allows an attacker to supply a crafted identifier containing relative traversal sequences. This identifier is stored and later used in requests when removing Fleet Server host configurations, potentially leading to unauthorized deletion of Kibana resources such as users and other critical data. The issue affects multiple versions of Kibana prior to specific fixed releases. A patch is available to address this vulnerability. Join the discussion | GCVE Database | 08/19/2026, 08:40:47 UTC Added: 08/19/2026, 13:50:34 UTC |
CVE-2026-72677: CWE-23 Relative Path Traversal in Elastic KibanaCVE-2026-72677 0 Relative Path Traversal (CWE-23) in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal (CAPEC-139). Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without rejecting relative traversal sequences. The identifier is stored as provided and is later incorporated into the request that Kibana issues when that configuration is removed. Join the discussion | CVE Database V5 | 08/19/2026, 08:40:47 UTC Added: 08/13/2026, 19:27:01 UTC |
Showing 1 to 2 of 2 results