https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T04:10:09.784548+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/CERTFR-2025-AVI-0636 CERTFR-2025-AVI-0636 — De multiples vulnérabilités ont été découvertes dans les produits Elastic. Elles permettent à un attaquant de provoquer… 2026-10-02T04:10:11.258866+00:00 CERTFR-2025-AVI-0636 https://vulnerability.circl.lu/vuln/bdu:2025-09241 bdu:2025-09241 2026-10-02T04:10:11.258947+00:00 bdu:2025-09241 https://vulnerability.circl.lu/vuln/cleanstart-2025-am34484 CLEANSTART-2025-AM34484 — Security fix for CVE-2025-25011 applied in: elastic-beats-fips 9.0.8-r0 2026-10-02T04:10:11.258969+00:00

Affected: CleanStart: elastic-beats-fips

Security vulnerability affects the elastic-beats-fips package. This issue is resolved in later releases. See references for vulnerability details.

 https://vulnerability.circl.lu/vuln/fkie_cve-2025-25011 fkie_cve-2025-25011 2026-10-02T04:10:11.259019+00:00

An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may exploit this flaw to move and delete arbitrary files, potentially gaining SYSTEM privileges.

 https://vulnerability.circl.lu/vuln/ghsa-h425-rqxh-h66f GHSA-h425-rqxh-h66f 2026-10-02T04:10:11.259059+00:00

An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may exploit this flaw to move and delete arbitrary files, potentially gaining SYSTEM privileges.