Vulnerabilidades de Search-guard

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Search-guard: 3 registro(s), com severidade, exploração e correções.

Flx 3

Somente exploradas (KEV) →

CVE-2026-4819 Média · 6.5 CWE-522 31/03/2026

Search Guard audit logs can contain under certain conditions user credentials

In Search Guard FLX versions from 1.0.0 up to 4.0.1, the audit logging feature might log user credentials from users logging into Kibana.

CVE-2026-4818 Alta · 8.1 CWE-285 31/03/2026

Some management operations on data streams are not properly restricted when user does not have the necessary privileges

In Search Guard FLX versions from 3.0.0 up to 4.0.1, there exists an issue which allows users without the necessary privileges to execute some management operations against data streams.

CVE-2026-4799 Média · 4.3 CWE-601 31/03/2026

Open redirect vulnerability in Search Guard Kibana Plugin via manipulated requests

In Search Guard FLX up to version 4.0.1, it is possible to use specially crafted requests to redirect the user to an untrusted URL.