| CVE-2026-78601 |
Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Privilege Abuse (CAPEC-122)
|
5.5
Medium
|
Sep 2, 2026 |
| CVE-2026-63138 |
Improper Neutralization of Special Elements in Data Query Logic (CWE-943) in Kibana can lead to information disclosure…
|
6.5
Medium
|
Sep 1, 2026 |
| CVE-2026-78597 |
Missing Authorization (CWE-862) in the Kibana Entity Store feature can lead to unauthorized credential creation via…
|
4.3
Medium
|
Sep 1, 2026 |
| CVE-2026-78592 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in Kibana can lead to the…
|
7.3
High
|
Sep 1, 2026 |
| CVE-2026-78606 |
Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized disclosure, modification, and deletion of data…
|
4.2
Medium
|
Sep 1, 2026 |
| CVE-2026-78603 |
Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Exploiting Incorrectly Configured…
|
4.3
Medium
|
Sep 1, 2026 |
| CVE-2026-78608 |
Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Privilege Abuse (CAPEC-122)
|
6.5
Medium
|
Sep 1, 2026 |
| CVE-2026-72654 |
Execution with Unnecessary Privileges (CWE-250) in the Kibana machine learning feature can lead to information…
|
6.5
Medium
|
Sep 1, 2026 |
| CVE-2026-72633 |
Incorrect Authorization (CWE-863) in Kibana Entity Analytics can lead to a loss of security monitoring via Accessing…
|
4.3
Medium
|
Sep 1, 2026 |
| CVE-2026-72641 |
Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized modification of data via Accessing Functionality…
|
5.4
Medium
|
Sep 1, 2026 |
| CVE-2026-72628 |
Improper Handling of Highly Compressed Data (CWE-409) in Kibana can lead to a denial of service via Excessive Allocation…
|
6.5
Medium
|
Sep 1, 2026 |
| CVE-2026-72644 |
Uncaught Exception (CWE-248) in Kibana can lead to a denial of service via Input Data Manipulation (CAPEC-153)
|
6.5
Medium
|
Sep 1, 2026 |
| CVE-2026-72682 |
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive…
|
6.5
Medium
|
Sep 1, 2026 |
| CVE-2026-63137 |
Incorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Exploiting Incorrectly Configured…
|
8.3
High
|
Sep 1, 2026 |
| CVE-2026-72652 |
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive…
|
6.5
Medium
|
Sep 1, 2026 |
| CVE-2026-33465 |
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive…
|
6.5
Medium
|
Sep 1, 2026 |
| CVE-2026-78581 |
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized data modification via…
|
4.2
Medium
|
Aug 25, 2026 |
| CVE-2026-49096 |
Uncaught Exception (CWE-248) in Kibana Cases can lead to denial of service via Input Data Manipulation (CAPEC-153)
|
4.3
Medium
|
Aug 13, 2026 |
| CVE-2026-72632 |
Observable Discrepancy (CWE-203) in Kibana Fleet can lead to information disclosure via Excavation (CAPEC-116)
|
7.1
High
|
Aug 13, 2026 |
| CVE-2026-72631 |
Improper Privilege Management (CWE-269) in Kibana Fleet can lead to privilege escalation via Privilege Escalation…
|
6.5
Medium
|
Aug 13, 2026 |
| CVE-2026-72630 |
Incorrect Authorization (CWE-863) in Kibana Fleet can lead to privilege escalation via Privilege Abuse (CAPEC-122)
|
7.1
High
|
Aug 13, 2026 |
| CVE-2026-72629 |
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized cross-space access via…
|
7.1
High
|
Aug 13, 2026 |
| CVE-2026-72643 |
Kibana Agent Builder determines whether a caller owns a private agent by comparing a stable user identifier when one…
|
7.1
High
|
Aug 13, 2026 |
| CVE-2026-72655 |
Improperly Controlled Modification of Dynamically-Determined Object Attributes (CWE-915) in the case management…
|
4.3
Medium
|
Aug 13, 2026 |
| CVE-2026-72653 |
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive…
|
6.5
Medium
|
Aug 13, 2026 |