CVE-2026-78597

Kibana 's Entity Store feature is affected by a Missing Authorization flaw (CWE-862) that allows an authenticated user with only low-privilege Security feature access to invoke an administrative operation, creating and persisting Elasticsearch API keys under the caller's identity while bypassing ...

CVE-2026-78597 Missing Authorization in Kibana Entity Store Leading to Unauthorized API Key Creation

Missing Authorization CWE-862 in the Kibana Entity Store feature can lead to unauthorized credential creation via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user holding only low-privilege Security feature access could invoke an administrative operation tha...

CVE-2026-78597: Missing Authorization

Missing Authorization CWE-862 in the Kibana Entity Store feature can lead to unauthorized credential creation via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user holding only low-privilege Security feature access could invoke an administrative operation tha...

BIT-ELK-2026-72632 Observable Discrepancy in Kibana Fleet Leading to Disclosure of Elastic Agent Elasticsearch API Keys

Observable Discrepancy CWE-203 in Kibana Fleet can lead to information disclosure via Excavation CAPEC-116. Fleet removes the Elasticsearch API key value of an enrolled Elastic Agent from the responses of its agent listing capability, but that capability accepted caller-supplied filter expression...

PT-2026-79935

Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...

PT-2026-79876

Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...

PT-2026-79877

Observable Discrepancy CWE-203 in Kibana Fleet can lead to information disclosure via Excavation CAPEC-116. Fleet removes the Elasticsearch API key value of an enrolled Elastic Agent from the responses of its agent listing capability, but that capability accepted caller-supplied filter expression...

PT-2026-79936

Observable Discrepancy CWE-203 in Kibana Fleet can lead to information disclosure via Excavation CAPEC-116. Fleet removes the Elasticsearch API key value of an enrolled Elastic Agent from the responses of its agent listing capability, but that capability accepted caller-supplied filter expression...

CVE-2026-72631

Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...

CVE-2026-72632

Kibana Fleet vulnerability CVE-2026-72632 allows an information disclosure of Elasticsearch API keys through a side-channel in the agent listing API. Root cause: Fleet evaluated caller-supplied filter expressions against the stored API-key field using Kibana’s internal Elasticsearch privileges, l...

PT-2026-71753

Name of the Vulnerable Software and Affected Versions Kibana Fleet affected versions not specified Description Improper privilege management in Kibana Fleet allows for privilege escalation. This occurs when an integration policy declares extra data streams for writing, which Fleet then adds to th...

CVE-2026-72631: Improper Privilege Management

Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...

Nagios Log Server Elasticsearch DoS

The vulnerability of the endpoint of the API system/stop service in the Elasticsearch software for monitoring and analyzing log files by Nagios Log Server is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to trigger a service failure ...

com.github.piltt:silky-persistence_2.10 (>=1.0.3, <=1.0.57), com.github.piltt:silky-persistence_2.11 (>=1.0.3, <=1.0.57) +3 more potentially affected by CVE-2020-7021 via org.elasticsearch:elasticsearch (1.7.6)

org.elasticsearch:elasticsearch MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.piltt:silky-persistence2.10 =1.0.3, =1.0.3, =12.0, =12.0, =12.0, =21.5 Source cves:...

com.github.piltt:silky-persistence_2.10 (>=1.0.3, <=1.0.57), com.github.piltt:silky-persistence_2.11 (>=1.0.3, <=1.0.57) +3 more potentially affected by CVE-2020-7019 via org.elasticsearch:elasticsearch (1.7.6)

org.elasticsearch:elasticsearch MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.piltt:silky-persistence2.10 =1.0.3, =1.0.3, =12.0, =12.0, =12.0, =21.5 Source cves:...

com.github.piltt:silky-persistence_2.10 (>=1.0.3, <=1.0.57), com.github.piltt:silky-persistence_2.11 (>=1.0.3, <=1.0.57) +3 more potentially affected by CVE-2018-3824 via org.elasticsearch:elasticsearch (1.7.6)

org.elasticsearch:elasticsearch MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.piltt:silky-persistence2.10 =1.0.3, =1.0.3, =12.0, =12.0, =12.0, =21.5 Source cves:...