BIT-KIBANA-2026-102410 Missing Authorization in Kibana Leading to Information Disclosure

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An internal API surface within the Metrics Experience feature did not enforce a Kibana-level authorization check that an equivalent, related API in the...

BIT-ELK-2026-102410 Missing Authorization in Kibana Leading to Information Disclosure

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An internal API surface within the Metrics Experience feature did not enforce a Kibana-level authorization check that an equivalent, related API in the...

Kibana 9.2.x / 9.3.x < 9.4.0 Missing Authorization (ESA-2026-191)

The version of Kibana installed on the remote host is 9.2.0 through 9.3.8 inclusive. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-191 advisory. - Missing Authorization CWE-862 in Kibana can lead to information disclosure via Accessing Functionality Not Properly...

CVE-2026-102410

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An internal API surface within the Metrics Experience feature did not enforce a Kibana-level authorization check that an equivalent, related API in the...

CVE-2026-102410 Missing Authorization in Kibana Leading to Information Disclosure

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An internal API surface within the Metrics Experience feature did not enforce a Kibana-level authorization check that an equivalent, related API in the...

CVE-2026-102410 Missing Authorization in Kibana Leading to Information Disclosure

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An internal API surface within the Metrics Experience feature did not enforce a Kibana-level authorization check that an equivalent, related API in the...

EUVD-2026-93931

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An internal API surface within the Metrics Experience feature did not enforce a Kibana-level authorization check that an equivalent, related API in the...

CVE-2026-102410 Missing Authorization in Kibana Leading to Information Disclosure

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An internal API surface within the Metrics Experience feature did not enforce a Kibana-level authorization check that an equivalent, related API in the...

CVE-2026-102410

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An internal API surface within the Metrics Experience feature did not enforce a Kibana-level authorization check that an equivalent, related API in the...

CVE-2026-102410

A Missing Authorization (CWE-862) vulnerability in Kibana allows for information disclosure within the Metrics Experience feature. The root cause is an internal API surface that fails to enforce Kibana-level authorization checks, unlike its related APIs. Consequently, a user with only data-store-...

Kibana 9.4.0 Security Update (ESA-2026-191)

Missing Authorization in Kibana Leading to Information Disclosure Missing Authorization CWE-862 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An internal API surface within the Metrics Experience feature did not enforce a...

CVE-2026-102410: Missing Authorization

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An internal API surface within the Metrics Experience feature did not enforce a Kibana-level authorization check that an equivalent, related API in the...

PT-2026-107160

Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description Missing authorization in the Metrics Experience feature allows for information disclosure. An internal API surface within this feature fails to enforce a Kibana-level authorization check, unli...