PT-2026-71776

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Missing authorization allows a user capable of authoring and evaluating Elastic Security detection rules to execute Osquery and Elastic Defend response actions on managed hosts. This occurs...

PT-2026-71777

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An authorization bypass exists where a user can execute unauthorized queries against Elastic Agents assigned to a Kibana space they are not permitted to access. This occurs because functionali...

CVE-2026-63145: Incorrect Authorization

Incorrect Authorization CWE-863 in Kibana can lead to integrity compromise of Machine Learning audit and notification records via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. A vulnerability exists in Kibana's Machine Learning functionality where a Machine Learning management...