| CVE-2026-63259 |
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via…
|
4.3
Medium
|
Jul 21, 2026 |
| CVE-2026-63145 |
Incorrect Authorization (CWE-863) in Kibana can lead to integrity compromise of Machine Learning audit and…
|
4.3
Medium
|
Jul 21, 2026 |
| CVE-2026-63143 |
Missing Authorization (CWE-862) in Kibana can lead to unauthorized information disclosure via Privilege Abuse…
|
4.3
Medium
|
Jul 21, 2026 |
| CVE-2026-63142 |
Incomplete List of Disallowed Inputs (CWE-184) in Kibana can allow an authenticated attacker with access to the…
|
5.0
Medium
|
Jul 21, 2026 |
| CVE-2026-63141 |
Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Connect…
|
6.3
Medium
|
Jul 21, 2026 |
| CVE-2026-63139 |
Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130)
|
6.5
Medium
|
Jul 21, 2026 |
| CVE-2026-56147 |
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized information disclosure and…
|
7.1
High
|
Jul 21, 2026 |
| CVE-2026-56146 |
Improper Access Control (CWE-284) in Kibana can lead to unauthorized modification of Entity Analytics Watchlist…
|
5.4
Medium
|
Jul 21, 2026 |
| CVE-2026-42397 |
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive…
|
6.5
Medium
|
Jul 21, 2026 |
| CVE-2026-49092 |
Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana can lead to unauthorized information exposure…
|
4.3
Medium
|
Jul 21, 2026 |
| CVE-2026-49091 |
Improper Output Neutralization for Logs (CWE-117) in Kibana can lead to log injection via Log…
|
8.0
High
|
Jul 1, 2026 |
| CVE-2026-49088 |
Insertion of Sensitive Information into Log File (CWE-532) in Kibana can lead to information disclosure
|
4.4
Medium
|
Jul 1, 2026 |
| CVE-2026-49087 |
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive…
|
6.5
Medium
|
Jul 1, 2026 |
| CVE-2026-56152 |
Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized information disclosure via Accessing…
|
5.3
Medium
|
Jul 1, 2026 |
| CVE-2026-56151 |
Improper Input Validation (CWE-20) in Kibana can lead to a denial of service via Input Data Manipulation (CAPEC-153)
|
6.5
Medium
|
Jul 1, 2026 |
| CVE-2026-49093 |
Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges…
|
6.3
Medium
|
May 28, 2026 |
| CVE-2026-49094 |
Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130)
|
6.5
Medium
|
May 28, 2026 |
| CVE-2026-49095 |
Improper Input Validation (CWE-20) in the Kibana Fleet agent policy management feature can lead to privilege escalation
|
7.2
High
|
May 28, 2026 |
| CVE-2026-42398 |
Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to…
|
7.7
High
|
May 28, 2026 |
| CVE-2026-42399 |
Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130)
|
6.5
Medium
|
May 28, 2026 |
| CVE-2026-42400 |
Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130)
|
6.5
Medium
|
May 28, 2026 |
| CVE-2026-42401 |
Improper Neutralization of Input During Web Page Generation (CWE-79) in Kibana can lead to stored HTML injection
|
4.1
Medium
|
May 28, 2026 |
| CVE-2026-33463 |
Operation on a Resource after Expiration or Termination (CWE-672) in Kibana can lead to unauthorized information…
|
5.3
Medium
|
May 28, 2026 |
| CVE-2026-33464 |
Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to a denial of service via Excessive Allocation…
|
6.5
Medium
|
May 28, 2026 |
| CVE-2026-33462 |
A path traversal vulnerability was identified in Kibana's dashboard management functionality
|
4.6
Medium
|
May 28, 2026 |