Known vulnerabilities in Kibana - page 2

Software: Kibana
Software CPE: cpe:2.3:a:elastic_stack:kibana:*:*:*:*:*:*:*:*
Total vulnerabilities: 189
Public exploits: 5
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Kibana Kibana is affected by 189 known vulnerabilities: 2 critical, 8 high, 44 medium, 135 low Critical High Medium Low

Vulnerabilities (189)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146651 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-78592
CWE-22 Low
No
No
8.19.16, 9.3.5, 9.4.2 01.09.2026 SB2026090167
#VU146649 - Allocation of Resources Without Limits or Throttling
CVE-2026-72652
CWE-770 Low
No
No
8.19.19, 9.3.5 01.09.2026 SB2026090167
#VU146648 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-72628
CWE-409 Low
No
No
8.19.21, 9.4.6, 9.5.2 01.09.2026 SB2026090165
#VU146647 - Execution with Unnecessary Privileges
CVE-2026-72654
CWE-250 Low
No
No
8.19.21, 9.4.6, 9.5.2 01.09.2026 SB2026090165
#VU146646 - Incorrect Authorization
CVE-2026-78606
CWE-863 Low
No
No
8.19.21, 9.4.6, 9.5.2 01.09.2026 SB2026090165
#VU146645 - Missing Authorization
CVE-2026-78608
CWE-862 Low
No
No
8.19.21, 9.4.6, 9.5.2 01.09.2026 SB2026090165
#VU146644 - Missing Authorization
CVE-2026-78597
CWE-862 Low
No
No
8.19.21, 9.4.6 01.09.2026 SB2026090165
#VU146643 - Incorrect Authorization
CVE-2026-63137
CWE-863 Medium
No
No
9.4.3 01.09.2026 SB2026090166
#VU146642 - Uncaught Exception
CVE-2026-72644
CWE-248 Low
No
No
9.4.5, 9.5.1 01.09.2026 SB2026090165
#VU146641 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2026-63138
CWE-943 Low
No
No
9.4.5, 9.5.1 01.09.2026 SB2026090165
#VU146640 - Incorrect Authorization
CVE-2026-72641
CWE-863 Low
No
No
9.4.6, 9.5.1 01.09.2026 SB2026090165
#VU146639 - Missing Authorization
CVE-2026-78603
CWE-862 Low
No
No
9.4.6, 9.5.1 01.09.2026 SB2026090165
#VU146638 - Incorrect Authorization
CVE-2026-72633
CWE-863 Low
No
No
9.4.6, 9.5.2 01.09.2026 SB2026090165
#VU146637 - Allocation of Resources Without Limits or Throttling
CVE-2026-72682
CWE-770 Low
No
No
9.4.6 01.09.2026 SB2026090165
#VU142360 - Relative Path Traversal
CVE-2026-72677
CWE-23 Low
No
No
8.19.17, 9.3.6, 9.4.3 13.08.2026 SB2026081369
#VU142337 - Incorrect Authorization
CVE-2026-72643
CWE-863 Low
No
No
9.4.5, 9.5.1 13.08.2026 SB2026081368
#VU142336 - Improper Privilege Management
CVE-2026-72631
CWE-269 Low
No
No
9.4.5, 9.5.1 13.08.2026 SB2026081368
#VU142335 - Authorization Bypass Through User-Controlled Key
CVE-2026-72680
CWE-639 Low
No
No
9.4.5 13.08.2026 SB2026081368
#VU142334 - Incorrect Authorization
CVE-2026-72672
CWE-863 Low
No
No
9.4.5 13.08.2026 SB2026081368
#VU142333 - Authorization Bypass Through User-Controlled Key
CVE-2026-72666
CWE-639 Low
No
No
9.4.5 13.08.2026 SB2026081368


Showing elements 21 - 40 out of 189