CVE-2026-63141 in KibanaИнформация

Сводка

по MITRE • 22.07.2026

Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Ответственный

Elastic

Резервировать

15.07.2026

Раскрытие

22.07.2026

Модерация

принято

Вход

VDB-381392

CPE

готов

CWE

CWE-862 (Подтверждённый)

CVSS

6.3 (VulDB)

EPSS

0.00202

KEV

Нет

Деятельности

Очень низкий

Источники

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-63141
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-63141
CVE Details	https://www.cvedetails.com/cve/CVE-2026-63141/

◂ Предыдущий Обзор Далее ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!