Skip to content
OpenAdvisories
Medium WID-SEC-2026-3575 4 CVEs

Kibana: Mehrere Schwachstellen

Published Sep 24, 2026 · Updated Sep 27, 2026 · Revision 2 · de-DE

Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um Daten zu manipulieren, um seine Privilegien zu erhöhen, und um einen Denial of Service Angriff durchzuführen.

Product

Kibana ist ein Open Source Datenvisualisierungs-Plugin für Elasticsearch.

Vulnerabilities 4

  • High 7.3
    CVE-2026-72668

    Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Privilege Escalation

    Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana Agent Builder can lead to privilege escalation. A non-administrative user able to edit a shared agent could cause privileged operations to be carried out under the identity of a higher-p…

    Elastic Kibana
  • Medium 6.5
    CVE-2026-78582

    Missing Authorization in Kibana Leading to Unauthorized Deletion of Data

    Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). An authenticated user holding Synthetics privileges scoped to a single Kibana space could per…

    Elastic Kibana
  • Medium 6.5
    CVE-2026-94400

    Uncontrolled Resource Consumption in Kibana Leading to denial of service

    Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130)

    Elastic Kibana
  • Medium 6.3
    CVE-2026-72662

    Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data

    Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user granted the Timeline fea…

    Elastic Kibana

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-87792, EUVD-2026-87793, EUVD-2026-87794, EUVD-2026-87799

  2. #1

    Initiale Fassung

References