CVE-2026-4819Medium 4.9Search Guard audit logs can contain under certain conditions user credentials0.2%
CVE-2026-4818Medium 6.8Some management operations on data streams are not properly restricted when user does not have the necessary privileges0.2%
CVE-2026-4799Medium 4.3Open redirect vulnerability in Search Guard Kibana Plugin via manipulated requests0.2%
CVE-2025-13653Medium 4.3Unauthorized access to documents in data streams with specially crafted requests0.2%
CVE-2025-12149Medium 6.0Unauthorized access to documents protected by Document-Level Security (DLS), when Signals watches include a search query involving protected documents0.3%
CVE-2025-12148Medium 6.0Unauthorized access to fields protected by Field Masking (FM) for fields of type IP0.3%
CVE-2025-12147Medium 6.0Unauthorized access to fields protected by Field-Level Security (FLS) when those fields are members of an object0.3%