CVE-2026-0532

highPriorität · verfolgen · 0EPSS 0.005 · 41. PerzentilDEEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.49% (41st) EPSS

CVSS 8.6 · high

Is it mine?

15 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · osv · cert_bund

EPSS · bewertet 2026-10-22

External Control of File Name or Path (CWE-73) combined with Server-Side Request Forgery (CWE-918) can allow an attacker to cause arbitrary file disclosure through a specially crafted credentials JSON payload in the Google Gemini connector configuration. This requires an attacker to have authenticated access with privileges sufficient to create or modify connectors (Alerts & Connectors: All). The server processes a configuration without proper validation, allowing for arbitrary network requests and for arbitrary file reads.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.6

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.18.6highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:Nsecondary · ENISA EU

v3.18.6highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:Nsecondary · security@elastic.coAusnutzbarkeit 3.9 · Auswirkung 4

v3.18.6highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:NsecondaryAusnutzbarkeit 3.9 · Auswirkung 4

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-918US

betroffene Produkte (15)

Betroffene Produkte und Versionsbereiche.

Open Source Kibana <8.19.10alle Versionencert_bundDE
Open Source Kibana <9.1.10alle Versionencert_bundDE
Open Source Kibana <9.2.4alle Versionencert_bundDE
Open Source Kibana< 8.19.10cert_bundDE
Open Source Kibana< 9.1.10cert_bundDE
Open Source Kibana< 9.2.4cert_bundDE
Elastic Kibana≤ 9.0.0 ≤9.1.9enisa_euvdEU
Elastic Kibana≤ 9.2.0 ≤9.2.3enisa_euvdEU
Elastic Kibana≤ 8.15.0 ≤8.19.9enisa_euvdEU
Bitnami elk< 8.19.10osvUSpkg:bitnami/elk
Bitnami elk9.0.0 → 9.1.10osvUSpkg:bitnami/elk
Bitnami elk9.2.0 → 9.2.4osvUSpkg:bitnami/elk
Bitnami kibana< 8.19.10osvUSpkg:bitnami/kibana
Bitnami kibana9.0.0 → 9.1.10osvUSpkg:bitnami/kibana
Bitnami kibana9.2.0 → 9.2.4osvUSpkg:bitnami/kibana

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

WID-SEC-W-2026-0100Kibana: Mehrere SchwachstellenDeutsch2026-01-13csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.
BIT-elk-2026-0532External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector2026-01-16vendor · osvUS
External Control of File Name or Path (CWE-73) combined with Server-Side Request Forgery (CWE-918) can allow an attacker to cause arbitrary file disclosure through a specially crafted credentials JSON payload in the Google Gemini connector configuration. This requires an attacker to have authenticated access with privileges sufficient to create or modify connectors (Alerts & Connectors: All). The server processes a configuration without proper validation, allowing for arbitrary network requests and for arbitrary file reads.
BIT-kibana-2026-0532External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector2026-01-16vendor · osvUS
External Control of File Name or Path (CWE-73) combined with Server-Side Request Forgery (CWE-918) can allow an attacker to cause arbitrary file disclosure through a specially crafted credentials JSON payload in the Google Gemini connector configuration. This requires an attacker to have authenticated access with privileges sufficient to create or modify connectors (Alerts & Connectors: All). The server processes a configuration without proper validation, allowing for arbitrary network requests and for arbitrary file reads.

auch bekannt als (5)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd osv cert_bund NVD CVE.org MITRE

veröffentlicht 2026-01-14geändert 2026-07-15

Referenzen (6)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan