DeutschShown in its original language — a full translation is planned for a future version.
Kibana: Mehrere Schwachstellen
view advisory published 2026-09-24
Ein Angreifer kann mehrere Schwachstellen in Kibana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um Daten zu manipulieren, um seine Privilegien zu erhöhen, und um einen Denial of Service Angriff durchzuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-94400US | — | — | ||
Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130) | ||||
| CVE-2026-78582US | —OT elevated | — | ||
Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). An authenticat… | ||||
| CVE-2026-72668US | — | — | ||
Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana Agent Builder can lead to privilege escalation. A non-administrative user able to edit a shared agent could… | ||||
| CVE-2026-72662US | — | — | ||
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properl… | ||||
02
references
External citations — patches, advisories, analysis.
- Elastic Security Announcement vom 2026-09-24external
- Elastic Security Announcement vom 2026-09-24external
- Elastic Security Announcement vom 2026-09-24external
- Elastic Security Announcement vom 2026-09-24external
- Elastic Security Announcement vom 2026-09-24external
- WID-SEC-W-2026-3575 - CSAF Versionself
- WID-SEC-2026-3575 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan