CVE-2026-63141 Missing Authorization in Kibana Leading to Unauthorized Access to Cloud Connect Management Functions

Missing Authorization CWE-862 in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints...

wazuh

This repository is an open-source security platform called Wazuh, which provides unified XDR and SIEM protection for endpoints and cloud workloads. The repository contains various files and templates for issue reporting, testing, and integration with external services. The probable entry points f...

The vulnerability of the elastic-endpoint-driver.sys driver, a software component used for protecting Elastic Endpoint Detection and Response (EDR) endpoints, allows a malicious actor to execute arbitrary code and trigger a service failure.

The vulnerability of the elastic-endpoint-driver.sys driver, a software component used for protecting Elastic Endpoint Detection and Response EDR endpoints, is related to pointer aliasing errors. Exploiting this vulnerability allows an attacker to execute arbitrary code and trigger service failur...

The vulnerability of Cisco Advanced Malware Protection for Endpoints’ threat detection system lies in insufficient validation of input data, allowing attackers to trigger a service failure.

The vulnerability of the Cisco Advanced Malware Protection for Endpoints system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to trigger a service failure...