Kibana Vulnerabilities Enable SSRF and XSS Attacks
Article Content
Browse articles 
Multiple vulnerabilities in Kibana have been identified, allowing attackers to execute Server-Side Request Forgery (SSRF) and Cross-Site Scripting (XSS) attacks. These vulnerabilities could potentially expose sensitive systems and data to unauthorized access. Organizations using Kibana are advised to assess their systems for these vulnerabilities.
Ask AI about this cluster
Answers cite the sources they use
Updated 193d ago How this analysis works
More articles in this cluster (2)
Continue Reading
Plugin4Shell: Zero-Click RCE Vulnerability in Major AI Coding Agents Plugin4Shell is a critical zero-click remote code execution vulnerability affecting four major AI coding agents: Claude Code, Codex, GitHub Copilot, and Gemini CLI. Discovered by AIR Security, this flaw allows attackers to exploit trusted plugin marketplaces by swapping legitimate plugins with malicious ones, gaining… 
SSRF Vulnerability in Sentry MCP Server Exposes Security Risks On July 12, 2026, researcher cccccccti disclosed a Server-Side Request Forgery (SSRF) vulnerability in the raw_sentry_api component of ddfourtwo/sentry-selfhosted-mcp, tracked as CVE-2026-81421. This vulnerability allows attackers to force Axios to call arbitrary endpoints, with a public exploit already available. As…