CVE-2026-72677 - Relative Path Traversal (CWE-23) in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal (CAPEC-139). Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without rejecting relative traversal sequences. The identifier is stored as provided and is later incorporated into the request that Kibana issues when that configuration is removed. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-81838 [高危] CVE-2026-81838 - A relative path traversal issue in the zip extraction…
• CVE-2026-66907 [高危] CVE-2026-66907 - Relative path traversal vulnerability in Apache Camel…
• CVE-2026-66906 [危急] CVE-2026-66906 - Relative path traversal vulnerability in Apache Camel…
• CVE-2026-60093 [中危] CVE-2026-60093 - Relative path traversal vulnerability in Apache Camel…
• CVE-2026-77113 [未知] CVE-2026-77113 - Path traversal in apport-unpack in Canonical Apport b…
• CVE-2026-72677 [高危] CVE-2026-72677 - Relative Path Traversal (CWE-23) in Kibana can lead t…