Elastic Kibana

• CVE-2026-72653 Medium 6.5 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service 0.4%
• CVE-2026-72651 Medium 6.5 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service 0.4%
• CVE-2026-72650 Medium 4.3 Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure 0.3%
• CVE-2026-72663 Medium 6.5 Inefficient Algorithmic Complexity in Kibana Leading to Denial of Service 0.5%
• CVE-2026-72661 Medium 6.5 Missing Authorization in Kibana Leading to Information Disclosure 0.4%
• CVE-2026-72660 Medium 6.5 Uncaught Exception in Kibana Leading to Denial of Service 0.5%
• CVE-2026-72659 Medium 6.5 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service 0.4%
• CVE-2026-72658 High 7.3 Cross-Site Request Forgery in Kibana Leading to Privilege Escalation 0.2%
• CVE-2026-72667 Medium 6.5 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service 0.4%
• CVE-2026-72666 Medium 6.8 Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Query Execution on Managed Hosts 0.4%
• CVE-2026-72665 High 8.1 Missing Authorization in Kibana Leading to Unauthorized Execution of Host Response Actions 0.5%
• CVE-2026-72664 Medium 6.5 Missing Authorization in Kibana Leading to Unauthorized Execution of Endpoint Response Actions 0.4%
• CVE-2026-72677 High 7.3 Relative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other Resources 0.4%
• CVE-2026-72675 High 7.1 Missing Authorization in Kibana Machine Learning Leading to Cross-Space Information Disclosure and Unauthorized Data Modification 0.3%
• CVE-2026-72674 Medium 6.5 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service 0.4%
• CVE-2026-72673 Medium 5.4 Incorrect Authorization in Kibana Leading to Unauthorized Deletion of Synthetics Private Locations 0.3%
• CVE-2026-72672 High 7.7 Incorrect Authorization in Kibana Leading to Disclosure of Elastic Defend Endpoint Event Data 0.4%
• CVE-2026-72671 Medium 4.3 Missing Authorization in Kibana Leading to Unauthorized Modification of Machine Learning Trained Model Space Assignments 0.3%
• CVE-2026-72670 High 7.7 Exposure of Sensitive Information to an Unauthorized Actor in Kibana Leading to Disclosure of Fleet Proxy Credentials 0.5%
• CVE-2026-72669 High 7.6 Missing Authorization in Kibana Leading to Cross-User Information Disclosure and Data Tampering 0.3%
• CVE-2026-72681 Medium 6.5 Missing Authorization in Kibana Leading to Privilege Escalation and Information Disclosure 0.4%
• CVE-2026-72680 Medium 6.5 Authorization Bypass Through User-Controlled Key in Kibana Agent Builder Leading to Unauthorized Data Modification 0.3%
• CVE-2026-49089 Medium 6.5 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service 0.5%
• CVE-2026-63262 Medium 4.3 Missing Authorization in Kibana Leading to Information Disclosure 0.3%
• CVE-2026-63261 Medium 6.5 Uncontrolled Resource Consumption in Kibana Leading to Denial of Service 0.5%
• CVE-2026-63260 Medium 6.5 Uncontrolled Resource Consumption in Kibana Leading to Denial of Service 0.5%
• CVE-2026-63259 Medium 4.3 Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure 0.3%
• CVE-2026-63145 Medium 4.3 Incorrect Authorization in Kibana Leading to Machine Learning Audit Log Integrity Compromise 0.3%
• CVE-2026-63143 Medium 4.3 Missing Authorization in Kibana Leading to Unauthorized Information Disclosure 0.3%
• CVE-2026-63142 Medium 5.0 Incomplete List of Disallowed Inputs in Kibana Leading to Server-Side Request Forgery 0.3%
• CVE-2026-63141 Medium 6.3 Missing Authorization in Kibana Leading to Unauthorized Access to Cloud Connect Management Functions 0.2%
• CVE-2026-63139 Medium 6.5 Uncontrolled Resource Consumption in Kibana Leading to Denial of Service 0.5%
• CVE-2026-56147 High 7.1 Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Information Disclosure and Case Attachment Integrity Compromise 0.3%
• CVE-2026-56146 Medium 5.4 Improper Access Control in Kibana Leading to Unauthorized Data Modification and Information Disclosure 0.2%
• CVE-2026-42397 Medium 6.5 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service 0.4%
• CVE-2026-49092 Medium 4.3 Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Unauthorized Information Exposure 0.3%
• CVE-2026-49091 High 8.0 Improper Output Neutralization for Logs in Kibana Leading to Log Injection 0.3%
• CVE-2026-49088 Medium 4.4 Insertion of Sensitive Information into Log File in Kibana Leading to Information Disclosure 0.3%
• CVE-2026-49087 Medium 6.5 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service 0.5%
• CVE-2026-56152 Medium 5.3 Incorrect Authorization in Kibana Leading to Information Disclosure 0.3%
• CVE-2026-56151 Medium 6.5 Improper Input Validation in Kibana Leading to Denial of Service 0.5%
• CVE-2026-49093 Medium 6.3 Server-Side Request Forgery (SSRF) in Kibana Leading to Unauthorized Network Access 0.2%
• CVE-2026-49094 Medium 6.5 Uncontrolled Resource Consumption in Kibana Leading to Denial of Service 0.3%
• CVE-2026-49095 High 7.2 Improper Input Validation in Kibana Fleet Leading to Privilege Escalation 0.3%
• CVE-2026-42398 High 7.7 Server-Side Request Forgery (SSRF) in Kibana Leading to Unauthorized Network Access 0.3%
• CVE-2026-42399 Medium 6.5 Uncontrolled Resource Consumption in Kibana Leading to Denial of Service 0.3%
• CVE-2026-42400 Medium 6.5 Uncontrolled Resource Consumption in Kibana Leading to Denial of Service 0.3%
• CVE-2026-42401 Medium 4.1 Improper Neutralization of Input During Web Page Generation in Kibana Leading to Stored HTML Injection 0.1%
• CVE-2026-33463 Medium 5.3 Operation on a Resource after Expiration or Termination in Kibana Leading to Unauthorized File Access 0.2%
• CVE-2026-33464 Medium 6.5 Uncontrolled Resource Consumption in Kibana Leading to Denial of Service 0.3%