| CVE-2026-115295 |
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via Accessing…
|
4.3
Medium
|
Nov 3, 2026 |
| CVE-2026-115294 |
Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in the Kibana Fleet feature can lead to…
|
7.3
High
|
Nov 3, 2026 |
| CVE-2026-115293 |
Insertion of Sensitive Information Into Sent Data (CWE-201) in Kibana Observability onboarding can lead to disclosure of…
|
6.5
Medium
|
Nov 3, 2026 |
| CVE-2026-115292 |
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana Machine Learning can lead to information disclosure…
|
4.3
Medium
|
Nov 3, 2026 |
| CVE-2026-102412 |
Incorrect Authorization (CWE-863) in Kibana can lead to sensitive information disclosure via Accessing Functionality Not…
|
6.5
Medium
|
Oct 6, 2026 |
| CVE-2026-102410 |
Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Accessing Functionality Not Properly…
|
4.3
Medium
|
Oct 6, 2026 |
| CVE-2026-102406 |
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception
|
8.8
High
|
Oct 6, 2026 |
| CVE-2026-94400 |
Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130)
|
6.5
Medium
|
Sep 26, 2026 |
| CVE-2026-78582 |
Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly…
|
6.5
Medium
|
Sep 26, 2026 |
| CVE-2026-72662 |
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized disclosure,…
|
6.3
Medium
|
Sep 26, 2026 |
| CVE-2026-72668 |
Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana Agent Builder can lead to privilege escalation
|
7.3
High
|
Sep 26, 2026 |
| CVE-2026-82302 |
Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized configuration modification via Exploiting…
|
8.1
High
|
Sep 3, 2026 |
| CVE-2026-82299 |
Incorrect Authorization (CWE-863) in Kibana can lead to information disclosure via Exploiting Incorrectly Configured…
|
6.5
Medium
|
Sep 3, 2026 |
| CVE-2026-82298 |
Incorrect Authorization (CWE-863) in Kibana can lead to denial of service via Exploiting Incorrectly Configured Access…
|
4.3
Medium
|
Sep 3, 2026 |
| CVE-2026-78596 |
Missing Authorization in Kibana Leading to Unauthorized Modification of Data / Missing Authorization (CWE-862) in Kibana…
|
4.3
Medium
|
Sep 3, 2026 |
| CVE-2026-78595 |
Missing Authorization in Kibana Leading to Information Disclosure / Missing Authorization (CWE-862) in the Kibana…
|
4.3
Medium
|
Sep 3, 2026 |
| CVE-2026-78593 |
An insufficiently validated configuration field in Kibana's Cribl integration allows an authenticated user holding…
|
4.3
Medium
|
Sep 3, 2026 |
| CVE-2026-78583 |
Incorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Input Data Manipulation (CAPEC-153)
|
8.1
High
|
Sep 3, 2026 |
| CVE-2026-82293 |
Incorrect Authorization (CWE-863) in the Kibana machine learning feature can lead to unauthorized resource consumption…
|
4.3
Medium
|
Sep 2, 2026 |
| CVE-2026-78586 |
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive…
|
6.5
Medium
|
Sep 2, 2026 |
| CVE-2026-78584 |
Observable Response Discrepancy (CWE-204) in the Kibana Osquery feature can lead to information disclosure via Query…
|
4.3
Medium
|
Sep 2, 2026 |
| CVE-2026-78591 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet feature…
|
6.3
Medium
|
Sep 2, 2026 |
| CVE-2026-78590 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet feature…
|
7.3
High
|
Sep 2, 2026 |
| CVE-2026-78599 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet feature…
|
6.5
Medium
|
Sep 2, 2026 |
| CVE-2026-78598 |
Incorrect Authorization (CWE-863) in the Kibana machine learning feature can lead to information disclosure via…
|
5.4
Medium
|
Sep 2, 2026 |