Kibana Timelion - Arbitrary Code Execution

Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands...

Kibana - Local File Inclusion

Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw in the Console plugin. An attacker with access to the Kibana Console API could send a request that will attempt to execute JavaScript which could possibly lead to an attacker executing arbitrary commands with...

GHSA-RCVQ-M9J9-6F4G vulnerabilities

Vulnerabilities for packages: kibana...

GHSA-3HRH-PFW6-9M5X vulnerabilities

Vulnerabilities for packages: kibana...

CVE-2026-48049 vulnerabilities

Vulnerabilities for packages: kibana...

CVE-2026-48022 vulnerabilities

Vulnerabilities for packages: kibana...

CVE-2026-47675 vulnerabilities

Vulnerabilities for packages: kibana...

CVE-2026-47673 vulnerabilities

Vulnerabilities for packages: kibana...

GHSA-XRHX-7G5J-RCJ5 vulnerabilities

Vulnerabilities for packages: kibana...

GHSA-X426-X7CC-3FPC vulnerabilities

Vulnerabilities for packages: kibana...

GHSA-F577-QRJJ-4474 vulnerabilities

Vulnerabilities for packages: kibana...

GHSA-2GCR-MFCQ-WCC3 vulnerabilities

Vulnerabilities for packages: kibana...

CVE-2026-47676 vulnerabilities

Vulnerabilities for packages: kibana...

CVE-2026-47674 vulnerabilities

Vulnerabilities for packages: kibana...

CVE-2026-33458

Server-Side Request Forgery CWE-918 in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data...

CVE-2026-44724 vulnerabilities

Vulnerabilities for packages: homepage, kibana...

CVE-2026-44645 vulnerabilities

Vulnerabilities for packages: kibana...

CVE-2026-44644 vulnerabilities

Vulnerabilities for packages: kibana...

GHSA-R7G9-XPMJ-5FCQ vulnerabilities

Vulnerabilities for packages: kibana...

GHSA-HVX9-HWR7-WJJ9 vulnerabilities

Vulnerabilities for packages: homepage, kibana...