2145 matches found
Kibana - Local File Inclusion
Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute JavaScript which could possibly lead to an attacker executing arbitrary commands with...
BIT-KIBANA-2026-63260 Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
Uncontrolled Resource Consumption CWE-400 in Kibana can lead to denial of service via Excessive Allocation CAPEC-130. An authenticated attacker with low-privilege access can trigger a denial of service condition in Kibana by sending a specially crafted, oversized request payload. Processing this...
Kibana 8.x < 8.19.19 / 9.0.x < 9.3.8 / 9.4.x < 9.4.4 Multiple Vulnerabilities (ESA-2026-66 / ESA-2026-69 / ESA-2026-71 / ESA-2026-72)
The version of Kibana installed on the remote host is 8.x prior to 8.19.19, or 9.0.x prior to 9.3.8, or 9.4.x prior to 9.4.4. It is, therefore, affected by multiple vulnerabilities as referenced in the ESA-2026-66, ESA-2026-69, ESA-2026-71, and ESA-2026-72 advisories. - Uncontrolled Resource...
Kibana 9.4.x < 9.4.4 Multiple Vulnerabilities (ESA-2026-70 / ESA-2026-73)
The version of Kibana installed on the remote host is 9.4.x prior to 9.4.4. It is, therefore, affected by multiple vulnerabilities as referenced in the ESA-2026-70 and ESA-2026-73 advisories. - Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to information disclosure v...
Kibana 9.3.x < 9.3.8 / 9.4.x < 9.4.4 Multiple Vulnerabilities (ESA-2026-65 / ESA-2026-67)
The version of Kibana installed on the remote host is 9.3.x prior to 9.3.8 or 9.4.x prior to 9.4.4. It is, therefore, affected by multiple vulnerabilities as referenced in the ESA-2026-65 and ESA-2026-67 advisories. - Missing Authorization CWE-862 in Kibana allows an authenticated user to access...
Kibana 8.7.0 < 8.19.18 / 9.0.x < 9.3.7 / 9.4.x < 9.4.3 Authorization Bypass (ESA-2026-59)
The version of Kibana installed on the remote host is 8.7.0 prior to 8.19.18, or 9.3.x prior to 9.3.7, or 9.4.x prior to 9.4.3. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-59 advisory. - Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to...
Kibana 8.x < 8.19.19 / 9.3.x < 9.3.8 / 9.4.x < 9.4.4 DoS (ESA-2026-63)
The version of Kibana installed on the remote host is 8.x prior to 8.19.19, or 9.3.x prior to 9.3.8, or 9.4.x prior to 9.4.4. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-63 advisory. - Uncontrolled Resource Consumption CWE-400 in Kibana can lead to denial of servic...
Kibana 9.3.x < 9.3.7 / 9.4.x < 9.4.4 DoS (ESA-2026-55)
The version of Kibana installed on the remote host is 9.3.x prior to 9.3.7 or 9.4.x prior to 9.4.4. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-55 advisory. - Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via...
GHSA-4C8G-83QW-93J6 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, kibana...
GHSA-V245-V573-V5VM vulnerabilities
Vulnerabilities for packages: kibana, gitlab-rails-ce-fips, gitlab-rails-ce...
CVE-2026-59887 vulnerabilities
Vulnerabilities for packages: kibana, gitlab-rails-ce-fips, gitlab-rails-ce...
CVE-2026-13676 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, kibana...
CVE-2026-65899 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips, librechat, kibana, opensearch-dashboards, langfuse, langfuse-fips, nextcloud-server...
CVE-2026-65902 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips, librechat, kibana, langfuse, langfuse-fips, nextcloud-server...
GHSA-45RX-2JWX-CXFR vulnerabilities
Vulnerabilities for packages: kibana...
CVE-2026-59892 vulnerabilities
Vulnerabilities for packages: kibana...
CVE-2026-65903 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips, librechat, kibana, opensearch-dashboards, langfuse, opensearch-dashboards-fips, langfuse-fips, nextcloud-server...
CVE-2026-65900 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips, librechat, kibana, langfuse, langfuse-fips, nextcloud-server...