VDB
CVE-2026-0532
CVE-2026-0532
PUBLISHED
CVSS 8.600000381469727 HIGH
External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector
EPSS 0.48% · 39.0th percentile
Risk Scores
CVSS 3.1
8.600000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
EPSS Score
0.48%
39.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | elk | 0, 9.2.0, 9.0.0 |
| Bitnami | elk | 0, 9.0.0, 9.2.0 |
| Bitnami | kibana | 0, 9.2.0, 9.0.0 |
Timeline
- Dec 5, 2025 PoC Published
- Dec 5, 2025 PoC Published
- Dec 6, 2025 PoC Published
- Dec 8, 2025 PoC Published
- Jan 13, 2026 CVE Published
- Jan 14, 2026 EPSS Score
- Jan 14, 2026 PoC Published
- Jan 17, 2026 EPSS Score
- Jan 21, 2026 EPSS Score
- Jan 21, 2026 PoC Published
- Jan 24, 2026 EPSS Score
- Jan 28, 2026 EPSS Score