CVE-2026-63141 in Kibana

Riassunto

di MITRE • 22/07/2026

Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsabile: Elastic
• Prenotare: 15/07/2026
• Divulgazione: 22/07/2026
• Moderazione: accettato
• Voce: VDB-381392
• CPE: pronto
• CWE: CWE-862 (confermato)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00202
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-63141
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-63141
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-63141/