PT-2026-79947

Missing Authorization CWE-862 in Kibana can lead to unauthorized execution of Elastic Defend response actions on managed hosts via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. A Kibana user who holds only detection rule authoring privileges for the Elastic Security solution c...

PT-2026-79889

Missing Authorization CWE-862 in Kibana can lead to unauthorized execution of Osquery and Elastic Defend response actions on managed hosts via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. A Kibana user who is able to author and evaluate Elastic Security detection rules can...

PT-2026-79954

The Elastic Security capability that suggests existing field values while a user authors endpoint policy artifacts queries Elastic Defend event data with Kibana's internal Elasticsearch account instead of the account of the requesting user. Only Kibana feature privileges are verified, and the...

PT-2026-79886

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An internal Kibana data retrieval capability used by Elastic Defend endpoint response actions did not enforce the Security Solution and endpoint...

PT-2026-79895

The Elastic Security capability that suggests existing field values while a user authors endpoint policy artifacts queries Elastic Defend event data with Kibana's internal Elasticsearch account instead of the account of the requesting user. Only Kibana feature privileges are verified, and the...

PT-2026-79948

Missing Authorization CWE-862 in Kibana can lead to unauthorized execution of Osquery and Elastic Defend response actions on managed hosts via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. A Kibana user who is able to author and evaluate Elastic Security detection rules can...

PT-2026-79941

Improperly Controlled Modification of Dynamically-Determined Object Attributes CWE-915 in the case management functionality of Elastic Security in Kibana can lead to unauthorized modification of case data by an authenticated user who has not been granted case editing privileges, via Manipulating...

PT-2026-79882

Improperly Controlled Modification of Dynamically-Determined Object Attributes CWE-915 in the case management functionality of Elastic Security in Kibana can lead to unauthorized modification of case data by an authenticated user who has not been granted case editing privileges, via Manipulating...

GO-2026-5343 vulnerabilities

Vulnerabilities for packages: elastic-agent, elastic-agent-fips...

GO-2026-5544 vulnerabilities

Vulnerabilities for packages: elastic-agent, elastic-agent-fips...

GO-2026-5932 vulnerabilities

Vulnerabilities for packages: peerdb-flow-fips, vitess, terrafmt, elastic-agent-fips, elastic-agent, peerdb-flow, terrafmt-fips...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: datadog-agent, mattermost-fips, k3s, grafana-fips, mattermost, loki, datadog-agent-fips, containerd, frankenphp-8.5, rke2-runtime-fips, beats-fips, consul, grafana, frankenphp-8.3, commercial-grafana, elastic-agent, rke2-runtime, zot, fuse-overlayfs-snapshotter,...

GO-2025-4252 vulnerabilities

Vulnerabilities for packages: beats-fips, cloudbeat-fips, apm-server-fips, wazuh-manager, wazuh-manager-fips, cloudbeat, elastic-agent, apm-server...

GO-2025-4253 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, apm-server-fips, elastic-agent-fips, cloudbeat, elastic-agent, apm-server...

GO-2026-4360 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, apm-server-fips, cloudbeat, beats, apm-server...

GO-2023-2413 vulnerabilities

Vulnerabilities for packages: cloudbeat-fips, apm-server-fips, elastic-agent-fips, cloudbeat, elastic-agent, apm-server...

GO-2025-4173 vulnerabilities

Vulnerabilities for packages: beats-fips, zabbix-agent2, zabbix-agent2-fips, bento, falcosidekick, agentbeat, minio, minio-fips, falcosidekick-fips, telegraf, elastic-agent, dapr-fips, elastic-agent-fips, beats, agentbeat-fips, dapr, influxd...

Missing Authorization

Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Missing Authorization via the response actions. An attacker can execute unauthorized actions on managed hosts by associating...

CVE-2026-72665

Missing Authorization CWE-862 in Kibana can lead to unauthorized execution of Osquery and Elastic Defend response actions on managed hosts via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. A Kibana user who is able to author and evaluate Elastic Security detection rules can...

CVE-2026-72672

The Elastic Security capability that suggests existing field values while a user authors endpoint policy artifacts queries Elastic Defend event data with Kibana's internal Elasticsearch account instead of the account of the requesting user. Only Kibana feature privileges are verified, and the...