Skip to contentElastic Kibana vulnerabilities
- elastic kibanaAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceCVE-2026-72651Fix available6.5 Medium
- elastic kibanaAuthorization Bypass Through User-Controlled Key in Kibana Leading to Information DisclosureCVE-2026-72650Fix available4.3 Medium
- elastic kibanaInefficient Algorithmic Complexity in Kibana Leading to Denial of ServiceCVE-2026-72663Fix available6.5 Medium
- elastic kibanaMissing Authorization in Kibana Leading to Information DisclosureCVE-2026-72661Fix available6.5 Medium
- elastic kibanaUncaught Exception in Kibana Leading to Denial of ServiceCVE-2026-72660Fix available6.5 Medium
- elastic kibanaAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceCVE-2026-72659Fix available6.5 Medium
- elastic kibanaCross-Site Request Forgery in Kibana Leading to Privilege EscalationCVE-2026-72658Fix available7.3 High
- elastic kibanaAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceCVE-2026-72667Fix available6.5 Medium
- elastic kibanaAuthorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Query Execution on Managed HostsCVE-2026-72666Fix available6.8 Medium
- elastic kibanaMissing Authorization in Kibana Leading to Unauthorized Execution of Host Response ActionsCVE-2026-72665Fix available8.1 High
- elastic kibanaMissing Authorization in Kibana Leading to Unauthorized Execution of Endpoint Response ActionsCVE-2026-72664Fix available6.5 Medium
- elastic kibanaRelative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other ResourcesCVE-2026-72677Fix available7.3 High
- elastic fleet server, kibana +1 moreImproper Control of Generation of Code in Fleet Server Leading to Code InjectionCVE-2026-726766.5 Medium
- elastic kibanaMissing Authorization in Kibana Machine Learning Leading to Cross-Space Information Disclosure and Unauthorized Data ModificationCVE-2026-72675Fix available7.1 High
- elastic kibanaAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceCVE-2026-72674Fix available6.5 Medium
- elastic kibanaIncorrect Authorization in Kibana Leading to Unauthorized Deletion of Synthetics Private LocationsCVE-2026-72673Fix available5.4 Medium
- elastic kibanaIncorrect Authorization in Kibana Leading to Disclosure of Elastic Defend Endpoint Event DataCVE-2026-72672Fix available7.7 High
- elastic kibanaMissing Authorization in Kibana Leading to Unauthorized Modification of Machine Learning Trained Model Space AssignmentsCVE-2026-72671Fix available4.3 Medium
- elastic kibanaExposure of Sensitive Information to an Unauthorized Actor in Kibana Leading to Disclosure of Fleet Proxy CredentialsCVE-2026-72670Fix available7.7 High
- elastic kibanaMissing Authorization in Kibana Leading to Cross-User Information Disclosure and Data TamperingCVE-2026-72669Fix available7.6 High
- elastic kibanaMissing Authorization in Kibana Leading to Privilege Escalation and Information DisclosureCVE-2026-72681Fix available6.5 Medium
- elastic kibanaAuthorization Bypass Through User-Controlled Key in Kibana Agent Builder Leading to Unauthorized Data ModificationCVE-2026-72680Fix available6.5 Medium
- elastic kibanaAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceCVE-2026-49089Fix available6.5 Medium
- elastic kibanaMissing Authorization in Kibana Leading to Information DisclosureCVE-2026-63262Fix available4.3 Medium
- elastic kibanaUncontrolled Resource Consumption in Kibana Leading to Denial of ServiceCVE-2026-63261Fix available6.5 Medium
- elastic kibanaUncontrolled Resource Consumption in Kibana Leading to Denial of ServiceCVE-2026-63260Fix available6.5 Medium
- elastic kibanaAuthorization Bypass Through User-Controlled Key in Kibana Leading to Information DisclosureCVE-2026-63259Fix available4.3 Medium
- elastic kibanaIncorrect Authorization in Kibana Leading to Machine Learning Audit Log Integrity CompromiseCVE-2026-63145Fix available4.3 Medium
- elastic kibanaMissing Authorization in Kibana Leading to Unauthorized Information DisclosureCVE-2026-63143Fix available4.3 Medium
- elastic kibanaIncomplete List of Disallowed Inputs in Kibana Leading to Server-Side Request ForgeryCVE-2026-63142Fix available5.0 Medium
- elastic kibanaMissing Authorization in Kibana Leading to Unauthorized Access to Cloud Connect Management FunctionsCVE-2026-63141Fix available6.3 Medium
- elastic kibanaUncontrolled Resource Consumption in Kibana Leading to Denial of ServiceCVE-2026-63139Fix available6.5 Medium
- elastic kibanaAuthorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Information Disclosure and Case Attachment Integrity CompromiseCVE-2026-56147Fix available7.1 High
- elastic kibanaImproper Access Control in Kibana Leading to Unauthorized Data Modification and Information DisclosureCVE-2026-56146Fix available5.4 Medium
- elastic kibanaAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceCVE-2026-42397Fix available6.5 Medium
- elastic kibanaUnintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Unauthorized Information ExposureCVE-2026-49092Fix available4.3 Medium
- elastic kibanaImproper Output Neutralization for Logs in Kibana Leading to Log InjectionCVE-2026-490918.0 High
- elastic kibanaInsertion of Sensitive Information into Log File in Kibana Leading to Information DisclosureCVE-2026-490884.4 Medium
- elastic kibanaAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceCVE-2026-490876.5 Medium
- elastic kibana, endpoint security +1 moreIncorrect Authorization in Kibana Leading to Information DisclosureCVE-2026-561525.3 Medium
- elastic kibanaImproper Input Validation in Kibana Leading to Denial of ServiceCVE-2026-561516.5 Medium
- elastic kibanaServer-Side Request Forgery (SSRF) in Kibana Leading to Unauthorized Network AccessCVE-2026-49093Fix available6.3 Medium
- elastic kibanaUncontrolled Resource Consumption in Kibana Leading to Denial of ServiceCVE-2026-49094Fix available6.5 Medium
- elastic kibanaImproper Input Validation in Kibana Fleet Leading to Privilege EscalationCVE-2026-49095Fix available7.2 High
- elastic kibanaServer-Side Request Forgery (SSRF) in Kibana Leading to Unauthorized Network AccessCVE-2026-42398Fix available7.7 High
- elastic kibanaUncontrolled Resource Consumption in Kibana Leading to Denial of ServiceCVE-2026-42399Fix available6.5 Medium
- elastic kibanaUncontrolled Resource Consumption in Kibana Leading to Denial of ServiceCVE-2026-42400Fix available6.5 Medium
- elastic kibanaImproper Neutralization of Input During Web Page Generation in Kibana Leading to Stored HTML InjectionCVE-2026-42401Fix available4.1 Medium
- elastic kibanaOperation on a Resource after Expiration or Termination in Kibana Leading to Unauthorized File AccessCVE-2026-33463Fix available5.3 Medium
- elastic kibanaUncontrolled Resource Consumption in Kibana Leading to Denial of ServiceCVE-2026-33464Fix available6.5 Medium
- Show moreLoading…