Known vulnerabilities in Kibana

Software: Kibana
Software CPE: cpe:2.3:a:elastic_stack:kibana:*:*:*:*:*:*:*:*
Total vulnerabilities: 189
Public exploits: 5
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Kibana Kibana is affected by 189 known vulnerabilities: 2 critical, 8 high, 44 medium, 135 low Critical High Medium Low

Vulnerabilities (189)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU152230 - Authorization Bypass Through User-Controlled Key
CVE-2026-72662
CWE-639 Low
No
No
8.19.22, 9.4.6 25.09.2026 SB20260925250
#VU152229 - Missing Authorization
CVE-2026-78582
CWE-862 Low
No
No
8.19.22, 9.4.7, 9.5.3 25.09.2026 SB20260925250
#VU152228 - Resource exhaustion
CVE-2026-94400
CWE-400 Low
No
No
8.19.22, 9.4.7, 9.5.3 25.09.2026 SB20260925250
#VU152227 - Unintended Proxy or Intermediary ('Confused Deputy')
CVE-2026-72668
CWE-441 Low
No
No
9.4.7, 9.5.0 25.09.2026 SB20260925250
#VU146880 - Incorrect Authorization
CVE-2026-78583
CWE-863 Medium
No
No
8.19.21, 9.4.6, 9.5.3 03.09.2026 SB2026090364
#VU146879 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-78593
CWE-94 Low
No
No
8.19.21, 9.4.6, 9.5.3 03.09.2026 SB2026090364
#VU146878 - Missing Authorization
CVE-2026-78596
CWE-862 Low
No
No
8.19.21, 9.4.6, 9.5.3 03.09.2026 SB2026090364
#VU146877 - Incorrect Authorization
CVE-2026-82298
CWE-863 Low
No
No
8.19.21, 9.4.6, 9.5.3 03.09.2026 SB2026090364
#VU146876 - Incorrect Authorization
CVE-2026-82302
CWE-863 Medium
No
No
8.19.22, 9.4.6, 9.5.3 03.09.2026 SB2026090364
#VU146875 - Missing Authorization
CVE-2026-78595
CWE-862 Low
No
No
9.4.6, 9.5.3 03.09.2026 SB2026090364
#VU146874 - Incorrect Authorization
CVE-2026-82299
CWE-863 Low
No
No
9.4.6, 9.5.3 03.09.2026 SB2026090364
#VU146669 - Allocation of Resources Without Limits or Throttling
CVE-2026-78586
CWE-770 Low
No
No
8.19.16, 9.3.5, 9.4.2 02.09.2026 SB2026090226
#VU146668 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-78591
CWE-22 Low
No
No
8.19.17, 9.3.6, 9.4.3 02.09.2026 SB2026090225
#VU146667 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-78590
CWE-22 Low
No
No
8.19.18, 9.3.6, 9.4.3 02.09.2026 SB2026090225
#VU146666 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-78599
CWE-22 Low
No
No
8.19.18, 9.4.3 02.09.2026 SB2026090225
#VU146665 - Incorrect Authorization
CVE-2026-78598
CWE-863 Low
No
No
8.19.19, 9.3.8, 9.4.4 02.09.2026 SB2026090223
#VU146664 - Incorrect Authorization
CVE-2026-82293
CWE-863 Low
No
No
8.19.21, 9.4.6, 9.5.2 02.09.2026 SB2026090224
#VU146663 - Observable Response Discrepancy
CVE-2026-78584
CWE-204 Low
No
No
9.4.4 02.09.2026 SB2026090223
#VU146661 - Missing Authorization
CVE-2026-78601
CWE-862 Low
No
No
9.4.5 02.09.2026 SB2026090222
#VU146650 - Allocation of Resources Without Limits or Throttling
CVE-2026-33465
CWE-770 Low
No
No
8.19.17, 9.3.0 01.09.2026 SB2026090168


Showing elements 1 - 20 out of 189