Kibana 8.9.x < 8.19.20 / 9.x < 9.4.5 Missing Authorization (ESA-2026-95)

The version of Kibana installed on the remote host is 8.9.x prior to 8.19.20, or 9.x prior to 9.4.5. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-95 advisory. - Missing Authorization CWE-862 in Kibana can lead to unauthorized execution of Elastic Defend response...

Kibana 8.19.20, and 9.4.5 Security Update (ESA-2026-95)

Missing Authorization in Kibana Leading to Unauthorized Execution of Endpoint Response Actions Missing Authorization CWE-862 in Kibana can lead to unauthorized execution of Elastic Defend response actions on managed hosts via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. A...