🕵️ RESEARCH & DEEP DIVES
Studies suggest Earth-like microbes could survive in Enceladus's subsurface ocean
Two new studies find Enceladus's ocean may be habitable to Earth-like microbes and that biosignatures could be easier to detect in its plume ice grains.- Applies to astrobiology research on Saturn's moon Enceladus, which hosts a subsurface ocean and hydrothermal vents beneath its ice shell
- A simulated Enceladus 'soda ocean' supported the heat-loving microbe Methanothermococcus okinawensis better than expected, widening the moon's habitability window
- A second study of Cassini ice-grain data found slow freezing causes organic compounds to segregate, concentrating potential biosignatures in a small fraction of grains
- Proposed missions like NASA's Enceladus Life Finder and ESA's L4 remain ungreenlit; plume-sampling probes could test for life
Five Elasticsearch DoS vulnerabilities (CWE-400) fixed in 8.19.22, 9.4.7, 9.5.3/9.5.4 updates
Elastic has disclosed five uncontrolled resource consumption vulnerabilities in Elasticsearch that can cause denial of service via excessive allocation.- Affects Elasticsearch versions 8.x and 9.x, including 8.0.0, 8.12.0, 9.0.0, 9.2.0, and 9.5.0 depending on the CVE
- Five issues (CVE-2026-94396 through CVE-2026-94408) are CWE-400 uncontrolled resource consumption flaws enabling denial of service via excessive allocation (CAPEC-130)
- CVE-2026-94408 is rated CVSS 4.9 (high privileges required); the other four are rated 6.5 with low privileges required
- Fixes shipped in Elasticsearch 8.19.22, 9.4.7, 9.5.3 and 9.5.4 via Elastic security advisories ESA-2026-179 through ESA-2026-184
- All five CVEs were reserved 2026-09-21 and published 2026-09-26 by Elastic as CVE assigner
Kibana uncontrolled resource consumption flaw (CVE-2026-94400) enables denial of service
A medium-severity uncontrolled resource consumption vulnerability in Kibana can cause denial of service via excessive allocation.- Affects Kibana versions 8.0.0, 9.0.0, and 9.5.0; fixed in 8.19.22, 9.4.7, and 9.5.3 (ESA-2026-181).
- CWE-400 uncontrolled resource consumption (CAPEC-130 excessive allocation) leads to denial of service.
- CVSS 6.5 (network, low complexity, low privileges, no user interaction, high availability impact).
- CVE-2026-94400 was assigned by Elastic, published 2026-09-26.
Elasticsearch DoS vulnerabilities CVE-2026-82300 and CVE-2026-82294 fixed in 8.19, 9.4, 9.5 updates
Elastic has patched two uncontrolled resource consumption flaws in Elasticsearch that could cause denial of service.- Affects Elasticsearch versions 8.0.0, 9.0.0, and 9.5.0; fixed in 8.19.21/8.19.22, 9.4.6/9.4.7, and 9.5.3/9.5.4 security updates
- CVE-2026-82300 and CVE-2026-82294 are CWE-400 uncontrolled resource consumption issues enabling denial of service via excessive allocation (CAPEC-130)
- Both rated CVSS 3.1 medium 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), requiring low-privileged network access
- Advisories ESA-2026-176 and ESA-2026-170 were published by Elastic on 2026-09-26
Kibana missing authorization flaw (CVE-2026-78582) lets users delete Synthetics monitors across spaces
A missing authorization flaw in Kibana lets privileged users delete Synthetics monitors in spaces they cannot access.- Affects Kibana versions 8.0.0, 9.0.0, and 9.5.0 (CVE-2026-78582, CVSS 6.5, CWE-862).
- An authenticated user with Synthetics privileges scoped to a single Kibana space can permanently delete Synthetics monitors shared into spaces they have no access to.
- When the monitor uses a private location, the deletion also destroys the underlying Elastic Agent integration configuration without Fleet's usual authorization checks.
- Attack vector is network-based with low complexity, requiring only low-privileged authenticated access (CAPEC-180: exploiting incorrectly configured access control).
CVE-2026-72668: Kibana Agent Builder confused-deputy flaw enables privilege escalation
Elastic fixed a confused-deputy vulnerability in Kibana Agent Builder that can lead to privilege escalation.- Applies to Kibana 9.4.0; fixed in the 9.4.7 / 9.5.0 security update (ESA-2026-85).
- CWE-441 confused-deputy flaw in Agent Builder allows privilege escalation, rated HIGH 7.3 (CVSS:3.1 AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N).
- A non-administrative user who can edit a shared agent can cause privileged operations to run under the identity of a higher-privileged user who later interacts with it.
- If the same user can also author workflows, this can extend to full administrative control of Kibana and the Elasticsearch cluster.
mathurvishal CloudClassroom-PHP-Project viewresult.php sql injectionA vulnera... (5) — <https://cve.threatint.com/CVE/CVE-2026-100739?utm_campaign=info&utm_medium=rss&utm_source=website|CVE ThreatInt>
Don’t worry there’s also undisclosed FortiGate vulns too. (5) — <https://cyberplace.social/@GossiTheDog/117339554795906452|@GossiTheDog@cyberplace.social>
The Netscaler zero day thing is real, being used in active attacks. (5) — <https://cyberplace.social/@GossiTheDog/117339550445208757|@GossiTheDog@cyberplace.social>
That Reddit rumor about Citrix notifying customers to take Netscaler servers offline because of actively exploited... (5) — <https://mastodon.social/@campuscodi/117339645406298613|@campuscodi@mastodon.social>
ThreatPrevent has discovered a misconfigured database storing 3TB of data of people who checked into hotels in an... (5) — <https://mastodon.social/@campuscodi/117339632183991200|@campuscodi@mastodon.social>
A header-level look at 4,688 small-business websites: 0.17% passed a header-only script-CSP rule [methods, parser rules, data] (5) — <https://www.reddit.com/r/netsec/comments/1wr23li/a_headerlevel_look_at_4688_smallbusiness_websites/|r/netsec>
🔓 CVEs & KEV
CVE-2026-100382 — Wikimedia Foundation Mediawiki - ExternalData Extension — CVSS 10.0 — Unauthenticated remote code execution through wikitext in ExternalDataImprope...
CVE-2026-91768 — PHP Group PHP — CVSS 6.5 — IPv6 ACL bypass in FastCGI listen.allowed_clients due to partial address comp...