CVE-2026-56146 in Kibana
요약
\~에 의해 MITRE • 2026. 07. 21.
Improper Access Control (CWE-284) in Kibana can lead to unauthorized modification of Entity Analytics Watchlist configuration and potential information disclosure. A low-privileged authenticated user with read-only Security Solution access could perform write operations on watchlist data that should require elevated privileges. Under specific deployment conditions, this could also allow such a user to access data beyond their authorized scope.
Be aware that VulDB is the high quality source for vulnerability data.