Kibana
- Software type
- Web application
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 10/22/2026, Kibana recorded 68 security vulnerabilities in the last 90 days, of which 18 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Kibana and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-102412Incorrect Authorization in Kibana Leading to Sensitive Information DisclosureCVE-2026-102410Missing Authorization in Kibana Leading to Information DisclosureCVE-2026-102406Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data InterceptionCVE-2026-94400Uncontrolled Resource Consumption in Kibana Leading to denial of serviceCVE-2026-78582Missing Authorization in Kibana Leading to Unauthorized Deletion of Data| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-102412Incorrect Authorization in Kibana Leading to Sensitive Information Disclosure | Exploitation statusNot exploited | FixYes |
| SeverityMedium |
CVE-2026-102410Missing Authorization in Kibana Leading to Information Disclosure | Exploitation statusNot exploited | FixYes | Published10/06/2026 | SeverityMedium |
|---|
CVE-2026-102406Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception | Exploitation statusNot exploited | FixYes | Published10/06/2026 | SeverityHigh |
|---|
CVE-2026-94400Uncontrolled Resource Consumption in Kibana Leading to denial of service | Exploitation statusNot exploited | FixYes | Published09/26/2026 | SeverityMedium |
|---|
CVE-2026-78582Missing Authorization in Kibana Leading to Unauthorized Deletion of Data | Exploitation statusNot exploited | FixYes | Published09/26/2026 | SeverityMedium |
|---|
CVE-2026-72662Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data | Exploitation statusNot exploited | FixYes | Published09/26/2026 | SeverityMedium |
|---|
CVE-2026-72668Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Privilege Escalation | Exploitation statusNot exploited | FixYes | Published09/26/2026 | SeverityHigh |
|---|
CVE-2026-82302Incorrect Authorization in Kibana Leading to Unauthorized Configuration Modification | Exploitation statusNot exploited | FixYes | Published09/03/2026 | SeverityHigh |
|---|
CVE-2026-82299Incorrect Authorization in Kibana Leading to Information Disclosure | Exploitation statusNot exploited | FixYes | Published09/03/2026 | SeverityMedium |
|---|
CVE-2026-82298Incorrect Authorization in Kibana Leading to Denial of Service | Exploitation statusNot exploited | FixYes | Published09/03/2026 | SeverityMedium |
|---|
205 Results | Page 1 of 21