PT-2026-62410 · Elastic · Kibana

CVE-2026-63141 · Publicado 2026-07-21 · Atualizado 2026-07-21

NVD

CVSS v3.1

6.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2026-63141

Produtos afetados

Kibana

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-63141 · Nota de Segurança
• https://discuss.elastic.co/t/kibana-9-3-8-9-4-4-security-update-esa-2026-65/388566 · Nota