Elastic Kibana

• CVE-2019-7609 Critical 9.8 Exploited Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt 95.3%
• CVE-2026-115295 Medium 4.3 Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure 0.3%
• CVE-2026-115294 High 7.3 Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource Deletion 0.3%
• CVE-2026-115293 Medium 6.5 Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure 0.3%
• CVE-2026-115292 Medium 4.3 Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure 0.2%
• CVE-2026-102412 Medium 6.5 Incorrect Authorization in Kibana Leading to Sensitive Information Disclosure 0.3%
• CVE-2026-102410 Medium 4.3 Missing Authorization in Kibana Leading to Information Disclosure 0.2%
• CVE-2026-102406 High 8.8 Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception 0.3%
• CVE-2026-94400 Medium 6.5 Uncontrolled Resource Consumption in Kibana Leading to denial of service 0.2%
• CVE-2026-78582 Medium 6.5 Missing Authorization in Kibana Leading to Unauthorized Deletion of Data 0.2%
• CVE-2026-72662 Medium 6.3 Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data 0.2%
• CVE-2026-72668 High 7.3 Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Privilege Escalation 0.2%
• CVE-2026-82302 High 8.1 Incorrect Authorization in Kibana Leading to Unauthorized Configuration Modification 0.4%
• CVE-2026-82299 Medium 6.5 Incorrect Authorization in Kibana Leading to Information Disclosure 0.4%
• CVE-2026-82298 Medium 4.3 Incorrect Authorization in Kibana Leading to Denial of Service 0.4%
• CVE-2026-78596 Medium 4.3 Missing Authorization in Kibana Leading to Unauthorized Cross-Space Write Operations 0.3%
• CVE-2026-78595 Medium 4.3 Missing Authorization in Kibana Fleet Plugin Leading to Cross-Space Agent Data Disclosure 0.3%
• CVE-2026-78593 Medium 4.3 Improper Control of Generation of Code in Kibana Leading to Privilege Escalation 0.3%
• CVE-2026-78583 High 8.1 Incorrect Authorization in Kibana Leading to Privilege Escalation 0.4%
• CVE-2026-82293 Medium 4.3 Incorrect Authorization in Kibana Leading to Unauthorized Resource Consumption 0.4%
• CVE-2026-78586 Medium 6.5 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service 0.5%
• CVE-2026-78584 Medium 4.3 Observable Response Discrepancy in Kibana Leading to Cross-Space Information Disclosure 0.3%
• CVE-2026-78591 Medium 6.3 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Kibana Leading to Unauthorized Resource Deletion 0.4%
• CVE-2026-78590 High 7.3 Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources 0.4%
• CVE-2026-78599 Medium 6.5 Stored Path Traversal in Kibana Leading to Unauthorized Deletion of Internal Resources 0.5%
• CVE-2026-78598 Medium 5.4 Incorrect Authorization in Kibana Leading to Unauthorized Cross-Space Exposure of Machine Learning Job Data 0.2%
• CVE-2026-78601 Medium 5.5 Missing Authorization in Kibana Leading to Unauthorized Elasticsearch Index Data Exposure 0.3%
• CVE-2026-63138 Medium 6.5 Improper Neutralization of Special Elements in Data Query Logic in Kibana Leading to Information Disclosure 0.5%
• CVE-2026-78597 Medium 4.3 Missing Authorization in Kibana Entity Store Leading to Unauthorized API Key Creation 0.3%
• CVE-2026-78592 High 7.3 Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources 0.4%
• CVE-2026-78606 Medium 4.2 Incorrect Authorization in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data 0.2%
• CVE-2026-78603 Medium 4.3 Missing Authorization in Kibana Leading to Unauthorized Disclosure of Fleet Deployment Metadata 0.3%
• CVE-2026-78608 Medium 6.5 Missing Authorization in Kibana Leading to Information Disclosure 0.4%
• CVE-2026-72654 Medium 6.5 Execution with Unnecessary Privileges in Kibana Leading to Information Disclosure 0.5%
• CVE-2026-72633 Medium 4.3 Incorrect Authorization in Kibana Leading to Unauthorized Disabling of Privilege Monitoring 0.3%
• CVE-2026-72641 Medium 5.4 Incorrect Authorization in Kibana Leading to Unauthorized Modification of Data 0.3%
• CVE-2026-72628 Medium 6.5 Improper Handling of Highly Compressed Data in Kibana Leading to Denial of Service 0.5%
• CVE-2026-72644 Medium 6.5 Uncaught Exception in Kibana Leading to Denial of Service 0.4%
• CVE-2026-72682 Medium 6.5 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service 0.5%
• CVE-2026-63137 High 8.3 Incorrect Authorization in Kibana Leading to Privilege Escalation 0.5%
• CVE-2026-72652 Medium 6.5 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service 0.4%
• CVE-2026-33465 Medium 6.5 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service 0.4%
• CVE-2026-78581 Medium 4.2 Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Data Modification in Kibana 0.2%
• CVE-2026-49096 Medium 4.3 Uncaught Exception in Kibana Cases Leading to Denial of Service 0.3%
• CVE-2026-72632 High 7.1 Observable Discrepancy in Kibana Fleet Leading to Disclosure of Elastic Agent Elasticsearch API Keys 0.3%
• CVE-2026-72631 Medium 6.5 Improper Privilege Management in Kibana Fleet Leading to Over-Scoped Elastic Agent API Keys 0.3%
• CVE-2026-72630 High 7.1 Incorrect Authorization in Kibana Fleet Leading to Privilege Escalation 0.3%
• CVE-2026-72629 High 7.1 Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Space Access to Machine Learning Trained Models 0.4%
• CVE-2026-72643 High 7.1 Incorrect Authorization in Kibana Agent Builder Leading to Disclosure and Tampering of Private Agents 0.4%
• CVE-2026-72655 Medium 4.3 Improperly Controlled Modification of Dynamically-Determined Object Attributes in Kibana Leading to Unauthorized Data Modification 0.3%