{"schema_version":"2","view":"grouped","data":[{"id":60501,"cve_ids":["CVE-2026-72668"],"payload":{"kind":"advisory","title":"Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Privilege Escalation","summary":"Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana Agent Builder can lead to privilege escalation. A non-administrative user able to edit a shared agent could cause privileged operations to be carried out under the identity of a higher-privileged user who subsequently interacts with that agent. Where the same user can also author workflows, this can extend to full administrative control of Kibana and of the Elasticsearch cluster.","evidence":"cve:CVE-2026-72668","products":[{"name":{"value":"Kibana","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-72668","aliases":["CVE-2026-72668"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Elastic","product":"Kibana","versions":[{"status":"affected","version":"9.4.0","versionType":"semver","lessThanOrEqual":"9.4.6"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T03:55:23.608Z","provider":"cve","references":["https://discuss.elastic.co/t/kibana-9-4-7-9-5-0-security-update-esa-2026-85/390678"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-72668","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T03:55:23.608Z"}}],"cna":{"orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","shortName":"elastic","dateUpdated":"2026-09-26T20:42:09.858Z"}}},"related_cves":[{"value":"CVE-2026-72668","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:1891c135-37d3-4fc0-8e1b-2deedaadecb7","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-72668","metrics":[],"products":[{"name":{"value":"elk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.4.7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-elk-2026-72668","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-72668","metrics":[],"products":[{"name":{"value":"kibana","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.4.7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kibana-2026-72668","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":3,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-72668","advisory_id":"1891c135-37d3-4fc0-8e1b-2deedaadecb7","event_types":["advisory"],"published_at":"2026-10-25T18:34:38.986909+00:00","technologies":["core-cve","kibana"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T20:42:09.858+00:00","detail_url":"/advisories/advisory%3A1891c135-37d3-4fc0-8e1b-2deedaadecb7","group":{"id":"advisory:1891c135-37d3-4fc0-8e1b-2deedaadecb7","revision":1,"primary_event_id":59767,"change":"published","superseded_by":[],"changed":{"id":59767,"cve_ids":["CVE-2026-72668"],"payload":{"kind":"advisory","title":"Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Privilege Escalation","summary":"Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana Agent Builder can lead to privilege escalation. A non-administrative user able to edit a shared agent could cause privileged operations to be carried out under the identity of a higher-privileged user who subsequently interacts with that agent. Where the same user can also author workflows, this can extend to full administrative control of Kibana and of the Elasticsearch cluster.","evidence":"cve:CVE-2026-72668","products":[{"name":{"value":"Kibana","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-72668","aliases":["CVE-2026-72668"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Elastic","product":"Kibana","versions":[{"status":"affected","version":"9.4.0","versionType":"semver","lessThanOrEqual":"9.4.6"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T03:55:23.608Z","provider":"cve","references":["https://discuss.elastic.co/t/kibana-9-4-7-9-5-0-security-update-esa-2026-85/390678"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-72668","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T03:55:23.608Z"}}],"cna":{"orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","shortName":"elastic","dateUpdated":"2026-09-26T20:42:09.858Z"}}},"related_cves":[{"value":"CVE-2026-72668","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:1891c135-37d3-4fc0-8e1b-2deedaadecb7","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-72668","metrics":[],"products":[{"name":{"value":"elk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.4.7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-elk-2026-72668","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-72668","metrics":[],"products":[{"name":{"value":"kibana","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.4.7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kibana-2026-72668","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":3,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-72668","advisory_id":"1891c135-37d3-4fc0-8e1b-2deedaadecb7","event_types":["advisory"],"published_at":"2026-10-25T18:34:38.986909+00:00","technologies":["core-cve","kibana"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-26T20:42:09.858+00:00","detail_url":"/events/59767"},"members":[{"id":59767,"cve_ids":["CVE-2026-72668"],"payload":{"kind":"advisory","title":"Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Privilege Escalation","summary":"Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana Agent Builder can lead to privilege escalation. A non-administrative user able to edit a shared agent could cause privileged operations to be carried out under the identity of a higher-privileged user who subsequently interacts with that agent. Where the same user can also author workflows, this can extend to full administrative control of Kibana and of the Elasticsearch cluster.","evidence":"cve:CVE-2026-72668","products":[{"name":{"value":"Kibana","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-72668","aliases":["CVE-2026-72668"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.3,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Elastic","product":"Kibana","versions":[{"status":"affected","version":"9.4.0","versionType":"semver","lessThanOrEqual":"9.4.6"}],"defaultStatus":"unaffected"}],"modified":"2026-09-29T03:55:23.608Z","provider":"cve","references":["https://discuss.elastic.co/t/kibana-9-4-7-9-5-0-security-update-esa-2026-85/390678"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-72668","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-28T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T03:55:23.608Z"}}],"cna":{"orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","shortName":"elastic","dateUpdated":"2026-09-26T20:42:09.858Z"}}},"related_cves":[{"value":"CVE-2026-72668","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:1891c135-37d3-4fc0-8e1b-2deedaadecb7","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-72668","metrics":[],"products":[{"name":{"value":"elk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.4.7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-elk-2026-72668","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-72668","metrics":[],"products":[{"name":{"value":"kibana","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"9.4.7","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"high","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kibana-2026-72668","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":3,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-72668","advisory_id":"1891c135-37d3-4fc0-8e1b-2deedaadecb7","event_types":["advisory"],"published_at":"2026-10-25T18:34:38.986909+00:00","technologies":["core-cve","kibana"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-26T20:42:09.858+00:00","detail_url":"/events/59767"}]}},{"id":60498,"cve_ids":["CVE-2026-94400"],"payload":{"kind":"advisory","title":"Uncontrolled Resource Consumption in Kibana Leading to denial of service","summary":"Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130)","evidence":"cve:CVE-2026-94400","products":[{"name":{"value":"Kibana","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-94400","aliases":["CVE-2026-94400"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Elastic","product":"Kibana","versions":[{"status":"affected","version":"8.0.0","versionType":"semver","lessThanOrEqual":"8.19.21"},{"status":"affected","version":"9.0.0","versionType":"semver","lessThanOrEqual":"9.4.6"},{"status":"affected","version":"9.5.0","versionType":"semver","lessThanOrEqual":"9.5.2"}],"defaultStatus":"unaffected"}],"modified":"2026-09-26T22:59:48.716Z","provider":"cve","references":["https://discuss.elastic.co/t/kibana-8-19-22-9-4-7-9-5-3-security-update-esa-2026-181/390685"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-94400","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-26T22:59:41.757778Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T22:59:48.716Z"}}],"cna":{"orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","shortName":"elastic","dateUpdated":"2026-09-26T20:42:21.912Z"}}},"related_cves":[{"value":"CVE-2026-94400","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a16e0d35-e989-49f0-beb5-ae331fab8b4a","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-94400","metrics":[],"products":[{"name":{"value":"elk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22","evidence":"/affected/0/ranges"},{"value":"9.4.7","evidence":"/affected/0/ranges"},{"value":"9.5.3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-elk-2026-94400","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-94400","metrics":[],"products":[{"name":{"value":"kibana","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22","evidence":"/affected/0/ranges"},{"value":"9.4.7","evidence":"/affected/0/ranges"},{"value":"9.5.3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kibana-2026-94400","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":3,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-94400","advisory_id":"a16e0d35-e989-49f0-beb5-ae331fab8b4a","event_types":["advisory"],"published_at":"2026-10-25T18:34:36.044494+00:00","technologies":["core-cve","kibana"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T20:42:21.912+00:00","detail_url":"/advisories/advisory%3Aa16e0d35-e989-49f0-beb5-ae331fab8b4a","group":{"id":"advisory:a16e0d35-e989-49f0-beb5-ae331fab8b4a","revision":1,"primary_event_id":59762,"change":"published","superseded_by":[],"changed":{"id":59762,"cve_ids":["CVE-2026-94400"],"payload":{"kind":"advisory","title":"Uncontrolled Resource Consumption in Kibana Leading to denial of service","summary":"Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130)","evidence":"cve:CVE-2026-94400","products":[{"name":{"value":"Kibana","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-94400","aliases":["CVE-2026-94400"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Elastic","product":"Kibana","versions":[{"status":"affected","version":"8.0.0","versionType":"semver","lessThanOrEqual":"8.19.21"},{"status":"affected","version":"9.0.0","versionType":"semver","lessThanOrEqual":"9.4.6"},{"status":"affected","version":"9.5.0","versionType":"semver","lessThanOrEqual":"9.5.2"}],"defaultStatus":"unaffected"}],"modified":"2026-09-26T22:59:48.716Z","provider":"cve","references":["https://discuss.elastic.co/t/kibana-8-19-22-9-4-7-9-5-3-security-update-esa-2026-181/390685"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-94400","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-26T22:59:41.757778Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T22:59:48.716Z"}}],"cna":{"orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","shortName":"elastic","dateUpdated":"2026-09-26T20:42:21.912Z"}}},"related_cves":[{"value":"CVE-2026-94400","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a16e0d35-e989-49f0-beb5-ae331fab8b4a","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-94400","metrics":[],"products":[{"name":{"value":"elk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22","evidence":"/affected/0/ranges"},{"value":"9.4.7","evidence":"/affected/0/ranges"},{"value":"9.5.3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-elk-2026-94400","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-94400","metrics":[],"products":[{"name":{"value":"kibana","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22","evidence":"/affected/0/ranges"},{"value":"9.4.7","evidence":"/affected/0/ranges"},{"value":"9.5.3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kibana-2026-94400","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":3,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-94400","advisory_id":"a16e0d35-e989-49f0-beb5-ae331fab8b4a","event_types":["advisory"],"published_at":"2026-10-25T18:34:36.044494+00:00","technologies":["core-cve","kibana"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-26T20:42:21.912+00:00","detail_url":"/events/59762"},"members":[{"id":59762,"cve_ids":["CVE-2026-94400"],"payload":{"kind":"advisory","title":"Uncontrolled Resource Consumption in Kibana Leading to denial of service","summary":"Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130)","evidence":"cve:CVE-2026-94400","products":[{"name":{"value":"Kibana","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-94400","aliases":["CVE-2026-94400"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Elastic","product":"Kibana","versions":[{"status":"affected","version":"8.0.0","versionType":"semver","lessThanOrEqual":"8.19.21"},{"status":"affected","version":"9.0.0","versionType":"semver","lessThanOrEqual":"9.4.6"},{"status":"affected","version":"9.5.0","versionType":"semver","lessThanOrEqual":"9.5.2"}],"defaultStatus":"unaffected"}],"modified":"2026-09-26T22:59:48.716Z","provider":"cve","references":["https://discuss.elastic.co/t/kibana-8-19-22-9-4-7-9-5-3-security-update-esa-2026-181/390685"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-94400","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-26T22:59:41.757778Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T22:59:48.716Z"}}],"cna":{"orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","shortName":"elastic","dateUpdated":"2026-09-26T20:42:21.912Z"}}},"related_cves":[{"value":"CVE-2026-94400","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:a16e0d35-e989-49f0-beb5-ae331fab8b4a","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-94400","metrics":[],"products":[{"name":{"value":"elk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22","evidence":"/affected/0/ranges"},{"value":"9.4.7","evidence":"/affected/0/ranges"},{"value":"9.5.3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-elk-2026-94400","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-94400","metrics":[],"products":[{"name":{"value":"kibana","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22","evidence":"/affected/0/ranges"},{"value":"9.4.7","evidence":"/affected/0/ranges"},{"value":"9.5.3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kibana-2026-94400","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":3,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-94400","advisory_id":"a16e0d35-e989-49f0-beb5-ae331fab8b4a","event_types":["advisory"],"published_at":"2026-10-25T18:34:36.044494+00:00","technologies":["core-cve","kibana"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-26T20:42:21.912+00:00","detail_url":"/events/59762"}]}},{"id":60476,"cve_ids":["CVE-2026-72662"],"payload":{"kind":"advisory","title":"Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data","summary":"Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user granted the Timeline feature privilege in a Kibana space could enumerate, read, modify, and delete draft Timeline objects belonging to other users in the same space. Read access is sufficient for enumeration and disclosure; the Timeline write privilege is required for modification and deletion.","evidence":"cve:CVE-2026-72662","products":[{"name":{"value":"Kibana","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-72662","aliases":["CVE-2026-72662"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Elastic","product":"Kibana","versions":[{"status":"affected","version":"8.0.0","versionType":"semver","lessThanOrEqual":"8.19.21"},{"status":"affected","version":"9.4.0","versionType":"semver","lessThanOrEqual":"9.4.5"}],"defaultStatus":"unaffected"}],"modified":"2026-09-26T23:01:33.512Z","provider":"cve","references":["https://discuss.elastic.co/t/kibana-8-19-22-9-4-6-security-update-esa-2026-103/390679"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-72662","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-26T23:01:25.142449Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T23:01:33.512Z"}}],"cna":{"orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","shortName":"elastic","dateUpdated":"2026-09-26T20:42:11.693Z"}}},"related_cves":[{"value":"CVE-2026-72662","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:0b6908e4-d5a3-4c48-9c80-c9f914ac9ac0","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-72662","metrics":[],"products":[{"name":{"value":"elk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22","evidence":"/affected/0/ranges"},{"value":"9.4.6","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-elk-2026-72662","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-72662","metrics":[],"products":[{"name":{"value":"kibana","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22","evidence":"/affected/0/ranges"},{"value":"9.4.6","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kibana-2026-72662","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":3,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-72662","advisory_id":"0b6908e4-d5a3-4c48-9c80-c9f914ac9ac0","event_types":["advisory"],"published_at":"2026-10-25T18:34:20.39126+00:00","technologies":["core-cve","kibana"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T20:42:11.693+00:00","detail_url":"/advisories/advisory%3A0b6908e4-d5a3-4c48-9c80-c9f914ac9ac0","group":{"id":"advisory:0b6908e4-d5a3-4c48-9c80-c9f914ac9ac0","revision":1,"primary_event_id":59716,"change":"published","superseded_by":[],"changed":{"id":59716,"cve_ids":["CVE-2026-72662"],"payload":{"kind":"advisory","title":"Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data","summary":"Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user granted the Timeline feature privilege in a Kibana space could enumerate, read, modify, and delete draft Timeline objects belonging to other users in the same space. Read access is sufficient for enumeration and disclosure; the Timeline write privilege is required for modification and deletion.","evidence":"cve:CVE-2026-72662","products":[{"name":{"value":"Kibana","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-72662","aliases":["CVE-2026-72662"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Elastic","product":"Kibana","versions":[{"status":"affected","version":"8.0.0","versionType":"semver","lessThanOrEqual":"8.19.21"},{"status":"affected","version":"9.4.0","versionType":"semver","lessThanOrEqual":"9.4.5"}],"defaultStatus":"unaffected"}],"modified":"2026-09-26T23:01:33.512Z","provider":"cve","references":["https://discuss.elastic.co/t/kibana-8-19-22-9-4-6-security-update-esa-2026-103/390679"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-72662","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-26T23:01:25.142449Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T23:01:33.512Z"}}],"cna":{"orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","shortName":"elastic","dateUpdated":"2026-09-26T20:42:11.693Z"}}},"related_cves":[{"value":"CVE-2026-72662","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:0b6908e4-d5a3-4c48-9c80-c9f914ac9ac0","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-72662","metrics":[],"products":[{"name":{"value":"elk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22","evidence":"/affected/0/ranges"},{"value":"9.4.6","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-elk-2026-72662","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-72662","metrics":[],"products":[{"name":{"value":"kibana","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22","evidence":"/affected/0/ranges"},{"value":"9.4.6","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kibana-2026-72662","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":3,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-72662","advisory_id":"0b6908e4-d5a3-4c48-9c80-c9f914ac9ac0","event_types":["advisory"],"published_at":"2026-10-25T18:34:20.39126+00:00","technologies":["core-cve","kibana"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-26T20:42:11.693+00:00","detail_url":"/events/59716"},"members":[{"id":59716,"cve_ids":["CVE-2026-72662"],"payload":{"kind":"advisory","title":"Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data","summary":"Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user granted the Timeline feature privilege in a Kibana space could enumerate, read, modify, and delete draft Timeline objects belonging to other users in the same space. Read access is sufficient for enumeration and disclosure; the Timeline write privilege is required for modification and deletion.","evidence":"cve:CVE-2026-72662","products":[{"name":{"value":"Kibana","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-72662","aliases":["CVE-2026-72662"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Elastic","product":"Kibana","versions":[{"status":"affected","version":"8.0.0","versionType":"semver","lessThanOrEqual":"8.19.21"},{"status":"affected","version":"9.4.0","versionType":"semver","lessThanOrEqual":"9.4.5"}],"defaultStatus":"unaffected"}],"modified":"2026-09-26T23:01:33.512Z","provider":"cve","references":["https://discuss.elastic.co/t/kibana-8-19-22-9-4-6-security-update-esa-2026-103/390679"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-72662","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-26T23:01:25.142449Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T23:01:33.512Z"}}],"cna":{"orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","shortName":"elastic","dateUpdated":"2026-09-26T20:42:11.693Z"}}},"related_cves":[{"value":"CVE-2026-72662","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:0b6908e4-d5a3-4c48-9c80-c9f914ac9ac0","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-72662","metrics":[],"products":[{"name":{"value":"elk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22","evidence":"/affected/0/ranges"},{"value":"9.4.6","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-elk-2026-72662","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-72662","metrics":[],"products":[{"name":{"value":"kibana","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22","evidence":"/affected/0/ranges"},{"value":"9.4.6","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kibana-2026-72662","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":3,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-72662","advisory_id":"0b6908e4-d5a3-4c48-9c80-c9f914ac9ac0","event_types":["advisory"],"published_at":"2026-10-25T18:34:20.39126+00:00","technologies":["core-cve","kibana"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-26T20:42:11.693+00:00","detail_url":"/events/59716"}]}},{"id":60473,"cve_ids":["CVE-2026-78582"],"payload":{"kind":"advisory","title":"Missing Authorization in Kibana Leading to Unauthorized Deletion of Data","summary":"Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). An authenticated user holding Synthetics privileges scoped to a single Kibana space could permanently delete Synthetics monitors that are shared into spaces they have no access to. Where a monitor is associated with a private location, the same operation also destroys the underlying Elastic Agent integration configuration without the authorization checks that Fleet would otherwise apply.","evidence":"cve:CVE-2026-78582","products":[{"name":{"value":"Kibana","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-78582","aliases":["CVE-2026-78582"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Elastic","product":"Kibana","versions":[{"status":"affected","version":"7.12.0","versionType":"semver","lessThanOrEqual":"7.17.29"},{"status":"affected","version":"8.0.0","versionType":"semver","lessThanOrEqual":"8.19.21"},{"status":"affected","version":"9.0.0","versionType":"semver","lessThanOrEqual":"9.4.6"},{"status":"affected","version":"9.5.0","versionType":"semver","lessThanOrEqual":"9.5.2"}],"defaultStatus":"unaffected"}],"modified":"2026-09-26T23:01:13.551Z","provider":"cve","references":["https://discuss.elastic.co/t/kibana-8-19-22-9-4-7-9-5-3-security-update-esa-2026-139/390680"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-78582","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-26T23:01:06.197371Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T23:01:13.551Z"}}],"cna":{"orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","shortName":"elastic","dateUpdated":"2026-09-26T20:42:13.395Z"}}},"related_cves":[{"value":"CVE-2026-78582","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:7f00a655-8e0b-4793-b560-6e46c093be9d","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-78582","metrics":[],"products":[{"name":{"value":"elk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22","evidence":"/affected/0/ranges"},{"value":"9.4.7","evidence":"/affected/0/ranges"},{"value":"9.5.3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-elk-2026-78582","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-78582","metrics":[],"products":[{"name":{"value":"kibana","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22","evidence":"/affected/0/ranges"},{"value":"9.4.7","evidence":"/affected/0/ranges"},{"value":"9.5.3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kibana-2026-78582","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":3,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-78582","advisory_id":"7f00a655-8e0b-4793-b560-6e46c093be9d","event_types":["advisory"],"published_at":"2026-10-25T18:34:18.565239+00:00","technologies":["core-cve","kibana"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-26T20:42:13.395+00:00","detail_url":"/advisories/advisory%3A7f00a655-8e0b-4793-b560-6e46c093be9d","group":{"id":"advisory:7f00a655-8e0b-4793-b560-6e46c093be9d","revision":1,"primary_event_id":59711,"change":"published","superseded_by":[],"changed":{"id":59711,"cve_ids":["CVE-2026-78582"],"payload":{"kind":"advisory","title":"Missing Authorization in Kibana Leading to Unauthorized Deletion of Data","summary":"Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). An authenticated user holding Synthetics privileges scoped to a single Kibana space could permanently delete Synthetics monitors that are shared into spaces they have no access to. Where a monitor is associated with a private location, the same operation also destroys the underlying Elastic Agent integration configuration without the authorization checks that Fleet would otherwise apply.","evidence":"cve:CVE-2026-78582","products":[{"name":{"value":"Kibana","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-78582","aliases":["CVE-2026-78582"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Elastic","product":"Kibana","versions":[{"status":"affected","version":"7.12.0","versionType":"semver","lessThanOrEqual":"7.17.29"},{"status":"affected","version":"8.0.0","versionType":"semver","lessThanOrEqual":"8.19.21"},{"status":"affected","version":"9.0.0","versionType":"semver","lessThanOrEqual":"9.4.6"},{"status":"affected","version":"9.5.0","versionType":"semver","lessThanOrEqual":"9.5.2"}],"defaultStatus":"unaffected"}],"modified":"2026-09-26T23:01:13.551Z","provider":"cve","references":["https://discuss.elastic.co/t/kibana-8-19-22-9-4-7-9-5-3-security-update-esa-2026-139/390680"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-78582","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-26T23:01:06.197371Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T23:01:13.551Z"}}],"cna":{"orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","shortName":"elastic","dateUpdated":"2026-09-26T20:42:13.395Z"}}},"related_cves":[{"value":"CVE-2026-78582","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:7f00a655-8e0b-4793-b560-6e46c093be9d","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-78582","metrics":[],"products":[{"name":{"value":"elk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22","evidence":"/affected/0/ranges"},{"value":"9.4.7","evidence":"/affected/0/ranges"},{"value":"9.5.3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-elk-2026-78582","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-78582","metrics":[],"products":[{"name":{"value":"kibana","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22","evidence":"/affected/0/ranges"},{"value":"9.4.7","evidence":"/affected/0/ranges"},{"value":"9.5.3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kibana-2026-78582","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":3,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-78582","advisory_id":"7f00a655-8e0b-4793-b560-6e46c093be9d","event_types":["advisory"],"published_at":"2026-10-25T18:34:18.565239+00:00","technologies":["core-cve","kibana"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-26T20:42:13.395+00:00","detail_url":"/events/59711"},"members":[{"id":59711,"cve_ids":["CVE-2026-78582"],"payload":{"kind":"advisory","title":"Missing Authorization in Kibana Leading to Unauthorized Deletion of Data","summary":"Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). An authenticated user holding Synthetics privileges scoped to a single Kibana space could permanently delete Synthetics monitors that are shared into spaces they have no access to. Where a monitor is associated with a private location, the same operation also destroys the underlying Elastic Agent integration configuration without the authorization checks that Fleet would otherwise apply.","evidence":"cve:CVE-2026-78582","products":[{"name":{"value":"Kibana","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-78582","aliases":["CVE-2026-78582"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"NONE"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Elastic","product":"Kibana","versions":[{"status":"affected","version":"7.12.0","versionType":"semver","lessThanOrEqual":"7.17.29"},{"status":"affected","version":"8.0.0","versionType":"semver","lessThanOrEqual":"8.19.21"},{"status":"affected","version":"9.0.0","versionType":"semver","lessThanOrEqual":"9.4.6"},{"status":"affected","version":"9.5.0","versionType":"semver","lessThanOrEqual":"9.5.2"}],"defaultStatus":"unaffected"}],"modified":"2026-09-26T23:01:13.551Z","provider":"cve","references":["https://discuss.elastic.co/t/kibana-8-19-22-9-4-7-9-5-3-security-update-esa-2026-139/390680"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-78582","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-26T23:01:06.197371Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-26T23:01:13.551Z"}}],"cna":{"orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","shortName":"elastic","dateUpdated":"2026-09-26T20:42:13.395Z"}}},"related_cves":[{"value":"CVE-2026-78582","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:7f00a655-8e0b-4793-b560-6e46c093be9d","priority":{"reasons":[],"severity":"medium","linked_cves":[{"cve":"CVE-2026-78582","metrics":[],"products":[{"name":{"value":"elk","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22","evidence":"/affected/0/ranges"},{"value":"9.4.7","evidence":"/affected/0/ranges"},{"value":"9.5.3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-elk-2026-78582","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"},{"cve":"CVE-2026-78582","metrics":[],"products":[{"name":{"value":"kibana","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"8.19.22","evidence":"/affected/0/ranges"},{"value":"9.4.7","evidence":"/affected/0/ranges"},{"value":"9.5.3","evidence":"/affected/0/ranges"}],"affected_versions":[]}],"severity":"medium","source_id":"core-osv","source_url":"https://osv.dev/vulnerability/BIT-kibana-2026-78582","relationship":"advisory","known_exploited":false,"relationship_evidence":"/cveMetadata/cveId"}],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":3,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-78582","advisory_id":"7f00a655-8e0b-4793-b560-6e46c093be9d","event_types":["advisory"],"published_at":"2026-10-25T18:34:18.565239+00:00","technologies":["core-cve","kibana"],"context_update":true,"extraction_method":"structured","source_published_at":"2026-09-26T20:42:13.395+00:00","detail_url":"/events/59711"}]}},{"id":12423,"cve_ids":["CVE-2026-102406"],"payload":{"kind":"advisory","title":"Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception","summary":"Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception. In this context, \"tenant\" refers to a user or team sharing the same Kibana deployment, not a separate Elastic Cloud organization or customer. Kibana's Fleet package installation process allowed a user holding delegated Fleet package-management privileges, without direct Elasticsearch administrative privileges, to claim a data stream identifier already in use by another tenant. Because ownership of that identifier was not verified before Fleet applied the uploaded package's generated index and ingest-pipeline settings to already-existing infrastructure, an attacker could redirect an existing tenant's data stream through infrastructure under their control. This exposed the affected tenant's subsequently ingested data to unauthorized disclosure and modification, and prevented that data from reaching its intended destination. Interception could continue even after the malicious package was removed, requiring separate remediation of the affected infrastructure.","evidence":"cve:CVE-2026-102406","products":[{"name":{"value":"Kibana","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-102406","aliases":["CVE-2026-102406"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Elastic","product":"Kibana","versions":[{"status":"affected","version":"8.14.0","versionType":"semver","lessThanOrEqual":"8.19.21"},{"status":"affected","version":"9.0.0","versionType":"semver","lessThanOrEqual":"9.4.6"},{"status":"affected","version":"9.5.0","versionType":"semver","lessThanOrEqual":"9.5.3"}],"defaultStatus":"unaffected"}],"modified":"2026-10-08T03:55:50.031Z","provider":"cve","references":["https://discuss.elastic.co/t/kibana-8-19-22-9-4-7-9-5-4-security-update-esa-2026-187/390860"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-102406","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-07T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T03:55:50.031Z"}}],"cna":{"orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","shortName":"elastic","dateUpdated":"2026-10-06T19:31:36.178Z"}}},"related_cves":[{"value":"CVE-2026-102406","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:ddf85cc9-9e14-4df5-8fda-dccc09ca0b7f","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102406","advisory_id":"ddf85cc9-9e14-4df5-8fda-dccc09ca0b7f","event_types":["advisory"],"published_at":"2026-10-25T00:05:53.829524+00:00","technologies":["core-cve","kibana"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T19:31:36.178+00:00","detail_url":"/advisories/advisory%3Addf85cc9-9e14-4df5-8fda-dccc09ca0b7f","group":{"id":"advisory:ddf85cc9-9e14-4df5-8fda-dccc09ca0b7f","revision":1,"primary_event_id":12363,"change":"published","superseded_by":[],"changed":{"id":12363,"cve_ids":["CVE-2026-102406"],"payload":{"kind":"advisory","title":"Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception","summary":"Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception. In this context, \"tenant\" refers to a user or team sharing the same Kibana deployment, not a separate Elastic Cloud organization or customer. Kibana's Fleet package installation process allowed a user holding delegated Fleet package-management privileges, without direct Elasticsearch administrative privileges, to claim a data stream identifier already in use by another tenant. Because ownership of that identifier was not verified before Fleet applied the uploaded package's generated index and ingest-pipeline settings to already-existing infrastructure, an attacker could redirect an existing tenant's data stream through infrastructure under their control. This exposed the affected tenant's subsequently ingested data to unauthorized disclosure and modification, and prevented that data from reaching its intended destination. Interception could continue even after the malicious package was removed, requiring separate remediation of the affected infrastructure.","evidence":"cve:CVE-2026-102406","products":[{"name":{"value":"Kibana","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-102406","aliases":["CVE-2026-102406"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Elastic","product":"Kibana","versions":[{"status":"affected","version":"8.14.0","versionType":"semver","lessThanOrEqual":"8.19.21"},{"status":"affected","version":"9.0.0","versionType":"semver","lessThanOrEqual":"9.4.6"},{"status":"affected","version":"9.5.0","versionType":"semver","lessThanOrEqual":"9.5.3"}],"defaultStatus":"unaffected"}],"modified":"2026-10-08T03:55:50.031Z","provider":"cve","references":["https://discuss.elastic.co/t/kibana-8-19-22-9-4-7-9-5-4-security-update-esa-2026-187/390860"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-102406","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-07T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T03:55:50.031Z"}}],"cna":{"orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","shortName":"elastic","dateUpdated":"2026-10-06T19:31:36.178Z"}}},"related_cves":[{"value":"CVE-2026-102406","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:ddf85cc9-9e14-4df5-8fda-dccc09ca0b7f","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102406","advisory_id":"ddf85cc9-9e14-4df5-8fda-dccc09ca0b7f","event_types":["advisory"],"published_at":"2026-10-25T00:05:53.829524+00:00","technologies":["core-cve","kibana"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T19:31:36.178+00:00","detail_url":"/events/12363"},"members":[{"id":12363,"cve_ids":["CVE-2026-102406"],"payload":{"kind":"advisory","title":"Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception","summary":"Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception. In this context, \"tenant\" refers to a user or team sharing the same Kibana deployment, not a separate Elastic Cloud organization or customer. Kibana's Fleet package installation process allowed a user holding delegated Fleet package-management privileges, without direct Elasticsearch administrative privileges, to claim a data stream identifier already in use by another tenant. Because ownership of that identifier was not verified before Fleet applied the uploaded package's generated index and ingest-pipeline settings to already-existing infrastructure, an attacker could redirect an existing tenant's data stream through infrastructure under their control. This exposed the affected tenant's subsequently ingested data to unauthorized disclosure and modification, and prevented that data from reaching its intended destination. Interception could continue even after the malicious package was removed, requiring separate remediation of the affected infrastructure.","evidence":"cve:CVE-2026-102406","products":[{"name":{"value":"Kibana","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-102406","aliases":["CVE-2026-102406"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.8,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Elastic","product":"Kibana","versions":[{"status":"affected","version":"8.14.0","versionType":"semver","lessThanOrEqual":"8.19.21"},{"status":"affected","version":"9.0.0","versionType":"semver","lessThanOrEqual":"9.4.6"},{"status":"affected","version":"9.5.0","versionType":"semver","lessThanOrEqual":"9.5.3"}],"defaultStatus":"unaffected"}],"modified":"2026-10-08T03:55:50.031Z","provider":"cve","references":["https://discuss.elastic.co/t/kibana-8-19-22-9-4-7-9-5-4-security-update-esa-2026-187/390860"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-102406","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-10-07T00:00:00+00:00"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-08T03:55:50.031Z"}}],"cna":{"orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","shortName":"elastic","dateUpdated":"2026-10-06T19:31:36.178Z"}}},"related_cves":[{"value":"CVE-2026-102406","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:ddf85cc9-9e14-4df5-8fda-dccc09ca0b7f","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102406","advisory_id":"ddf85cc9-9e14-4df5-8fda-dccc09ca0b7f","event_types":["advisory"],"published_at":"2026-10-25T00:05:53.829524+00:00","technologies":["core-cve","kibana"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T19:31:36.178+00:00","detail_url":"/events/12363"}]}},{"id":9603,"cve_ids":["CVE-2026-102412"],"payload":{"kind":"advisory","title":"Incorrect Authorization in Kibana Leading to Sensitive Information Disclosure","summary":"Incorrect Authorization (CWE-863) in Kibana can lead to sensitive information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated Kibana user with limited Fleet management privileges could access sensitive credential material that should be restricted to users with Fleet settings administrative access. Successful exploitation could allow an attacker to obtain private cryptographic key material configured for Fleet Server host connections, potentially enabling impersonation of trusted Fleet infrastructure components in deployments where those keys are actively used.","evidence":"cve:CVE-2026-102412","products":[{"name":{"value":"Kibana","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-102412","aliases":["CVE-2026-102412"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Elastic","product":"Kibana","versions":[{"status":"affected","version":"9.3.0","versionType":"semver","lessThanOrEqual":"9.3.8"},{"status":"affected","version":"9.4.0","versionType":"semver","lessThanOrEqual":"9.4.7"},{"status":"affected","version":"9.5.0","versionType":"semver","lessThanOrEqual":"9.5.4"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T19:54:33.779Z","provider":"cve","references":["https://discuss.elastic.co/t/kibana-9-4-8-9-5-5-security-update-esa-2026-193/390866"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-102412","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T19:54:24.509467Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T19:54:33.779Z"}}],"cna":{"orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","shortName":"elastic","dateUpdated":"2026-10-06T19:31:44.904Z"}}},"related_cves":[{"value":"CVE-2026-102412","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:93051c15-f917-4761-96ed-d93865e7fcfb","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102412","advisory_id":"93051c15-f917-4761-96ed-d93865e7fcfb","event_types":["advisory"],"published_at":"2026-10-24T23:20:03.521102+00:00","technologies":["core-cve","kibana"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T19:31:44.904+00:00","detail_url":"/advisories/advisory%3A93051c15-f917-4761-96ed-d93865e7fcfb","group":{"id":"advisory:93051c15-f917-4761-96ed-d93865e7fcfb","revision":1,"primary_event_id":9579,"change":"published","superseded_by":[],"changed":{"id":9579,"cve_ids":["CVE-2026-102412"],"payload":{"kind":"advisory","title":"Incorrect Authorization in Kibana Leading to Sensitive Information Disclosure","summary":"Incorrect Authorization (CWE-863) in Kibana can lead to sensitive information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated Kibana user with limited Fleet management privileges could access sensitive credential material that should be restricted to users with Fleet settings administrative access. Successful exploitation could allow an attacker to obtain private cryptographic key material configured for Fleet Server host connections, potentially enabling impersonation of trusted Fleet infrastructure components in deployments where those keys are actively used.","evidence":"cve:CVE-2026-102412","products":[{"name":{"value":"Kibana","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-102412","aliases":["CVE-2026-102412"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Elastic","product":"Kibana","versions":[{"status":"affected","version":"9.3.0","versionType":"semver","lessThanOrEqual":"9.3.8"},{"status":"affected","version":"9.4.0","versionType":"semver","lessThanOrEqual":"9.4.7"},{"status":"affected","version":"9.5.0","versionType":"semver","lessThanOrEqual":"9.5.4"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T19:54:33.779Z","provider":"cve","references":["https://discuss.elastic.co/t/kibana-9-4-8-9-5-5-security-update-esa-2026-193/390866"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-102412","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T19:54:24.509467Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T19:54:33.779Z"}}],"cna":{"orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","shortName":"elastic","dateUpdated":"2026-10-06T19:31:44.904Z"}}},"related_cves":[{"value":"CVE-2026-102412","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:93051c15-f917-4761-96ed-d93865e7fcfb","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102412","advisory_id":"93051c15-f917-4761-96ed-d93865e7fcfb","event_types":["advisory"],"published_at":"2026-10-24T23:20:03.521102+00:00","technologies":["core-cve","kibana"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T19:31:44.904+00:00","detail_url":"/events/9579"},"members":[{"id":9579,"cve_ids":["CVE-2026-102412"],"payload":{"kind":"advisory","title":"Incorrect Authorization in Kibana Leading to Sensitive Information Disclosure","summary":"Incorrect Authorization (CWE-863) in Kibana can lead to sensitive information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated Kibana user with limited Fleet management privileges could access sensitive credential material that should be restricted to users with Fleet settings administrative access. Successful exploitation could allow an attacker to obtain private cryptographic key material configured for Fleet Server host connections, potentially enabling impersonation of trusted Fleet infrastructure components in deployments where those keys are actively used.","evidence":"cve:CVE-2026-102412","products":[{"name":{"value":"Kibana","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-102412","aliases":["CVE-2026-102412"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Elastic","product":"Kibana","versions":[{"status":"affected","version":"9.3.0","versionType":"semver","lessThanOrEqual":"9.3.8"},{"status":"affected","version":"9.4.0","versionType":"semver","lessThanOrEqual":"9.4.7"},{"status":"affected","version":"9.5.0","versionType":"semver","lessThanOrEqual":"9.5.4"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T19:54:33.779Z","provider":"cve","references":["https://discuss.elastic.co/t/kibana-9-4-8-9-5-5-security-update-esa-2026-193/390866"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-102412","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T19:54:24.509467Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T19:54:33.779Z"}}],"cna":{"orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","shortName":"elastic","dateUpdated":"2026-10-06T19:31:44.904Z"}}},"related_cves":[{"value":"CVE-2026-102412","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:93051c15-f917-4761-96ed-d93865e7fcfb","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102412","advisory_id":"93051c15-f917-4761-96ed-d93865e7fcfb","event_types":["advisory"],"published_at":"2026-10-24T23:20:03.521102+00:00","technologies":["core-cve","kibana"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T19:31:44.904+00:00","detail_url":"/events/9579"}]}},{"id":9600,"cve_ids":["CVE-2026-102410"],"payload":{"kind":"advisory","title":"Missing Authorization in Kibana Leading to Information Disclosure","summary":"Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An internal API surface within the Metrics Experience feature did not enforce a Kibana-level authorization check that an equivalent, related API in the same feature did enforce. As a result, a user who held only data-store-level read access to an index, but no corresponding Kibana feature privilege, could retrieve index-derived metric data through Kibana that the properly-authorized API would otherwise have blocked.","evidence":"cve:CVE-2026-102410","products":[{"name":{"value":"Kibana","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-102410","aliases":["CVE-2026-102410"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Elastic","product":"Kibana","versions":[{"status":"affected","version":"9.2.0","versionType":"semver","lessThanOrEqual":"9.3.8"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T19:55:18.319Z","provider":"cve","references":["https://discuss.elastic.co/t/kibana-9-4-0-security-update-esa-2026-191/390864"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-102410","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T19:55:09.692900Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T19:55:18.319Z"}}],"cna":{"orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","shortName":"elastic","dateUpdated":"2026-10-06T19:31:41.977Z"}}},"related_cves":[{"value":"CVE-2026-102410","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:70896277-b0d9-4b75-b9ad-12bcc9387179","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102410","advisory_id":"70896277-b0d9-4b75-b9ad-12bcc9387179","event_types":["advisory"],"published_at":"2026-10-24T23:20:01.574824+00:00","technologies":["core-cve","kibana"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T19:31:41.977+00:00","detail_url":"/advisories/advisory%3A70896277-b0d9-4b75-b9ad-12bcc9387179","group":{"id":"advisory:70896277-b0d9-4b75-b9ad-12bcc9387179","revision":1,"primary_event_id":9576,"change":"published","superseded_by":[],"changed":{"id":9576,"cve_ids":["CVE-2026-102410"],"payload":{"kind":"advisory","title":"Missing Authorization in Kibana Leading to Information Disclosure","summary":"Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An internal API surface within the Metrics Experience feature did not enforce a Kibana-level authorization check that an equivalent, related API in the same feature did enforce. As a result, a user who held only data-store-level read access to an index, but no corresponding Kibana feature privilege, could retrieve index-derived metric data through Kibana that the properly-authorized API would otherwise have blocked.","evidence":"cve:CVE-2026-102410","products":[{"name":{"value":"Kibana","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-102410","aliases":["CVE-2026-102410"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Elastic","product":"Kibana","versions":[{"status":"affected","version":"9.2.0","versionType":"semver","lessThanOrEqual":"9.3.8"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T19:55:18.319Z","provider":"cve","references":["https://discuss.elastic.co/t/kibana-9-4-0-security-update-esa-2026-191/390864"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-102410","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T19:55:09.692900Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T19:55:18.319Z"}}],"cna":{"orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","shortName":"elastic","dateUpdated":"2026-10-06T19:31:41.977Z"}}},"related_cves":[{"value":"CVE-2026-102410","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:70896277-b0d9-4b75-b9ad-12bcc9387179","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102410","advisory_id":"70896277-b0d9-4b75-b9ad-12bcc9387179","event_types":["advisory"],"published_at":"2026-10-24T23:20:01.574824+00:00","technologies":["core-cve","kibana"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T19:31:41.977+00:00","detail_url":"/events/9576"},"members":[{"id":9576,"cve_ids":["CVE-2026-102410"],"payload":{"kind":"advisory","title":"Missing Authorization in Kibana Leading to Information Disclosure","summary":"Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An internal API surface within the Metrics Experience feature did not enforce a Kibana-level authorization check that an equivalent, related API in the same feature did enforce. As a result, a user who held only data-store-level read access to an index, but no corresponding Kibana feature privilege, could retrieve index-derived metric data through Kibana that the properly-authorized API would otherwise have blocked.","evidence":"cve:CVE-2026-102410","products":[{"name":{"value":"Kibana","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-102410","aliases":["CVE-2026-102410"],"metrics":[{"format":"CVSS","cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"},"scenarios":[{"lang":"en","value":"GENERAL"}]}],"affected":[{"vendor":"Elastic","product":"Kibana","versions":[{"status":"affected","version":"9.2.0","versionType":"semver","lessThanOrEqual":"9.3.8"}],"defaultStatus":"unaffected"}],"modified":"2026-10-06T19:55:18.319Z","provider":"cve","references":["https://discuss.elastic.co/t/kibana-9-4-0-security-update-esa-2026-191/390864"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-102410","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-06T19:55:09.692900Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-06T19:55:18.319Z"}}],"cna":{"orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","shortName":"elastic","dateUpdated":"2026-10-06T19:31:41.977Z"}}},"related_cves":[{"value":"CVE-2026-102410","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:70896277-b0d9-4b75-b9ad-12bcc9387179","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-102410","advisory_id":"70896277-b0d9-4b75-b9ad-12bcc9387179","event_types":["advisory"],"published_at":"2026-10-24T23:20:01.574824+00:00","technologies":["core-cve","kibana"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-06T19:31:41.977+00:00","detail_url":"/events/9576"}]}}],"next_after":60501,"next_before":9600}