CVE-2026-78596

Kibana (versions 8.19.2, 9.4.6, 9.5.3 ) is affected by a Missing Authorization flaw (CWE-862) in Entity Analytics migration operations . An authenticated user holding only Security read-level access in a single Kibana space can trigger these migration operations, which perform privileged writes a...