CVE-2026-63141 in Kibana

Resumen

por MITRE • 2026-07-22

Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: Elastic
• Reservar: 2026-07-15
• Divulgación: 2026-07-22
• Moderación: aceptado
• Artículo: VDB-381392
• CPE: listo
• CWE: CWE-862 (confirmado)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00202
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-63141
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-63141
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-63141/