The vulnerability of the access rights processing mechanism in the Entity Analytics Watchlist module of the Security Solution service from the Kibana data visualization platform allows a violator to bypass security restrictions.

The vulnerability of the access control processing mechanism for the Entity Analytics Watchlist module of the Security Solution service in the Kibana data visualization platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to bypa...

Incorrect Authorization

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Incorrect Authorization via the Entity Analytics Watchlist. An attacker can modify configuration data and access information beyon...

EUVD-2026-46396

Improper Access Control CWE-284 in Kibana can lead to unauthorized modification of Entity Analytics Watchlist configuration and potential information disclosure. A low-privileged authenticated user with read-only Security Solution access could perform write operations on watchlist data that shoul...

CVE-2026-56146: Incorrect Authorization

Improper Access Control CWE-284 in Kibana can lead to unauthorized modification of Entity Analytics Watchlist configuration and potential information disclosure. A low-privileged authenticated user with read-only Security Solution access could perform write operations on watchlist data that shoul...