Elastic Kibana vulnerabilities

• elastic kibana Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure CVE-2026-115295 4.3 MediumNovember 3, 2026
• elastic kibana Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource Deletion CVE-2026-115294 7.3 HighNovember 3, 2026
• elastic kibana Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure CVE-2026-115293 6.5 MediumNovember 3, 2026
• elastic kibana Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure CVE-2026-115292 4.3 MediumNovember 3, 2026
• elastic kibana Incorrect Authorization in Kibana Leading to Sensitive Information Disclosure CVE-2026-102412 Fix available 6.5 MediumOctober 6, 2026
• elastic kibana Missing Authorization in Kibana Leading to Information Disclosure CVE-2026-102410 Fix available 4.3 MediumOctober 6, 2026
• elastic kibana Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception CVE-2026-102406 Fix available 8.8 HighOctober 6, 2026
• elastic kibana Uncontrolled Resource Consumption in Kibana Leading to denial of service CVE-2026-94400 Fix available 6.5 MediumSeptember 26, 2026
• elastic kibana Missing Authorization in Kibana Leading to Unauthorized Deletion of Data CVE-2026-78582 Fix available 6.5 MediumSeptember 26, 2026
• elastic kibana Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data CVE-2026-72662 Fix available 6.3 MediumSeptember 26, 2026
• elastic kibana Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Privilege Escalation CVE-2026-72668 Fix available 7.3 HighSeptember 26, 2026
• elastic kibana Incorrect Authorization in Kibana Leading to Unauthorized Configuration Modification CVE-2026-82302 Fix available 8.1 HighSeptember 3, 2026
• elastic kibana Incorrect Authorization in Kibana Leading to Information Disclosure CVE-2026-82299 Fix available 6.5 MediumSeptember 3, 2026
• elastic kibana Incorrect Authorization in Kibana Leading to Denial of Service CVE-2026-82298 Fix available 4.3 MediumSeptember 3, 2026
• elastic kibana Missing Authorization in Kibana Leading to Unauthorized Cross-Space Write Operations CVE-2026-78596 Fix available 4.3 MediumSeptember 3, 2026
• elastic kibana Missing Authorization in Kibana Fleet Plugin Leading to Cross-Space Agent Data Disclosure CVE-2026-78595 Fix available 4.3 MediumSeptember 3, 2026
• elastic kibana Improper Control of Generation of Code in Kibana Leading to Privilege Escalation CVE-2026-78593 Fix available 4.3 MediumSeptember 3, 2026
• elastic kibana Incorrect Authorization in Kibana Leading to Privilege Escalation CVE-2026-78583 Fix available 8.1 HighSeptember 3, 2026
• elastic kibana Incorrect Authorization in Kibana Leading to Unauthorized Resource Consumption CVE-2026-82293 Fix available 4.3 MediumSeptember 2, 2026
• elastic kibana Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service CVE-2026-78586 6.5 MediumSeptember 2, 2026
• elastic kibana Observable Response Discrepancy in Kibana Leading to Cross-Space Information Disclosure CVE-2026-78584 4.3 MediumSeptember 2, 2026
• elastic kibana Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Kibana Leading to Unauthorized Resource Deletion CVE-2026-78591 6.3 MediumSeptember 2, 2026
• elastic kibana Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources CVE-2026-78590 7.3 HighSeptember 2, 2026
• elastic kibana Stored Path Traversal in Kibana Leading to Unauthorized Deletion of Internal Resources CVE-2026-78599 6.5 MediumSeptember 2, 2026
• elastic kibana Incorrect Authorization in Kibana Leading to Unauthorized Cross-Space Exposure of Machine Learning Job Data CVE-2026-78598 5.4 MediumSeptember 2, 2026
• elastic kibana Missing Authorization in Kibana Leading to Unauthorized Elasticsearch Index Data Exposure CVE-2026-78601 5.5 MediumSeptember 2, 2026
• elastic kibana Improper Neutralization of Special Elements in Data Query Logic in Kibana Leading to Information Disclosure CVE-2026-63138 6.5 MediumSeptember 1, 2026
• elastic kibana Missing Authorization in Kibana Entity Store Leading to Unauthorized API Key Creation CVE-2026-78597 4.3 MediumSeptember 1, 2026
• elastic kibana Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources CVE-2026-78592 7.3 HighSeptember 1, 2026
• elastic kibana Incorrect Authorization in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data CVE-2026-78606 4.2 MediumSeptember 1, 2026
• elastic kibana Missing Authorization in Kibana Leading to Unauthorized Disclosure of Fleet Deployment Metadata CVE-2026-78603 4.3 MediumSeptember 1, 2026
• elastic kibana Missing Authorization in Kibana Leading to Information Disclosure CVE-2026-78608 6.5 MediumSeptember 1, 2026
• elastic kibana Execution with Unnecessary Privileges in Kibana Leading to Information Disclosure CVE-2026-72654 6.5 MediumSeptember 1, 2026
• elastic kibana Incorrect Authorization in Kibana Leading to Unauthorized Disabling of Privilege Monitoring CVE-2026-72633 Fix available 4.3 MediumSeptember 1, 2026
• elastic kibana Incorrect Authorization in Kibana Leading to Unauthorized Modification of Data CVE-2026-72641 5.4 MediumSeptember 1, 2026
• elastic kibana Improper Handling of Highly Compressed Data in Kibana Leading to Denial of Service CVE-2026-72628 6.5 MediumSeptember 1, 2026
• elastic kibana Uncaught Exception in Kibana Leading to Denial of Service CVE-2026-72644 6.5 MediumSeptember 1, 2026
• elastic kibana Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service CVE-2026-72682 6.5 MediumSeptember 1, 2026
• elastic kibana Incorrect Authorization in Kibana Leading to Privilege Escalation CVE-2026-63137 8.3 HighSeptember 1, 2026
• elastic kibana Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service CVE-2026-72652 6.5 MediumSeptember 1, 2026
• elastic kibana Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service CVE-2026-33465 6.5 MediumSeptember 1, 2026
• elastic kibana Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Data Modification in Kibana CVE-2026-78581 Fix available 4.2 MediumAugust 25, 2026
• elastic kibana Uncaught Exception in Kibana Cases Leading to Denial of Service CVE-2026-49096 Fix available 4.3 MediumAugust 13, 2026
• elastic kibana Observable Discrepancy in Kibana Fleet Leading to Disclosure of Elastic Agent Elasticsearch API Keys CVE-2026-72632 Fix available 7.1 HighAugust 13, 2026
• elastic kibana Improper Privilege Management in Kibana Fleet Leading to Over-Scoped Elastic Agent API Keys CVE-2026-72631 Fix available 6.5 MediumAugust 13, 2026
• elastic kibana Incorrect Authorization in Kibana Fleet Leading to Privilege Escalation CVE-2026-72630 Fix available 7.1 HighAugust 13, 2026
• elastic kibana Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Space Access to Machine Learning Trained Models CVE-2026-72629 Fix available 7.1 HighAugust 13, 2026
• elastic kibana Incorrect Authorization in Kibana Agent Builder Leading to Disclosure and Tampering of Private Agents CVE-2026-72643 Fix available 7.1 HighAugust 13, 2026
• elastic kibana Improperly Controlled Modification of Dynamically-Determined Object Attributes in Kibana Leading to Unauthorized Data Modification CVE-2026-72655 Fix available 4.3 MediumAugust 13, 2026
• elastic kibana Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service CVE-2026-72653 Fix available 6.5 MediumAugust 13, 2026
• Show olderLoading…