Known Vulnerabilities for Endpoint by Elastic
Listed below are 1 of the newest known vulnerabilities associated with "Endpoint" by "Elastic".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-49094 json | Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An ... | Not Provided | 2026-05-28 | 2026-05-28 |
| CVE-2026-48926 json | Jenkins Job Import Plugin 143.v044a_2e819b_27 and earlier does not perform a permission check in an HTTP endpoint, allowing a... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-48904 json | An improper access check allows privelege escalation through the com_users group editing webservice endpoint. | Not Provided | 2026-05-26 | 2026-05-26 |
| CVE-2026-48545 json | Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform cross-Space se... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-48527 json | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions up to and including 26.0.0 are affected by a st... | Not Provided | 2026-05-29 | 2026-05-29 |
| CVE-2026-48525 json | PyJWT is a JSON Web Token implementation in Python. From 2.8.0 to 2.12.1, when verifying detached JWS tokens using the unenco... | Not Provided | 2026-05-28 | 2026-05-28 |
| CVE-2026-48524 json | PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, PyJWKClient.get_signing_key() forces a fresh HTTP reques... | Not Provided | 2026-05-28 | 2026-05-28 |
| CVE-2026-48501 json | GitHub CLI (gh) is GitHub’s official command line tool. Prior to 2.93.0, GitHub CLI incorrectly includes authorization head... | Not Provided | 2026-05-29 | 2026-05-29 |
| CVE-2026-48249 json | Open ISES Tickets before 3.44.2 disables TLS certificate verification in rm/incs/mobile_login.inc.php by setting CURLOPT_SSL_... | Not Provided | 2026-05-21 | 2026-05-26 |
| CVE-2026-48248 json | Open ISES Tickets before 3.44.2 disables TLS certificate verification in incs/login.inc.php by setting CURLOPT_SSL_VERIFYPEER... | Not Provided | 2026-05-21 | 2026-05-26 |