CVE-2026-63141 in Kibana

الملخص

بحسب MITRE • 22/07/2026

Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• مسؤول: Elastic
• حجز: 15/07/2026
• إفشاء: 22/07/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-381392
• CPE: جاهز
• CWE: CWE-862 (مؤكد)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00202
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-63141
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-63141
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-63141/