Known vulnerabilities in Kibana - page 4

Software: Kibana
Software CPE: cpe:2.3:a:elastic_stack:kibana:*:*:*:*:*:*:*:*
Total vulnerabilities: 189
Public exploits: 5
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Kibana Kibana is affected by 189 known vulnerabilities: 2 critical, 8 high, 44 medium, 135 low Critical High Medium Low

Vulnerabilities (189)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142361 - Resource exhaustion
CWE-400 Medium
No
No
8.19.20, 9.4.5 13.08.2026 SB2026081368
#VU142359 - Missing Authorization
CVE-2026-72661
CWE-862 Low
No
No
8.19.19, 9.3.8, 9.4.4 13.08.2026 SB2026081368
#VU142358 - Allocation of Resources Without Limits or Throttling
CVE-2026-72653
CWE-770 Low
No
No
8.19.19, 9.3.8, 9.4.4 13.08.2026 SB2026081368
#VU139143 - Authorization Bypass Through User-Controlled Key
CVE-2026-56147
CWE-639 Low
No
No
8.19.18, 9.3.7, 9.4.3 22.07.2026 SB2026072275
#VU139142 - Resource exhaustion
CVE-2026-63139
CWE-400 Low
No
No
8.19.19, 9.3.8, 9.4.4 22.07.2026 SB2026072275
#VU139141 - Incomplete List of Disallowed Inputs
CVE-2026-63142
CWE-184 Low
No
No
8.19.19, 9.3.8, 9.4.4 22.07.2026 SB2026072275
#VU139140 - Incorrect Authorization
CVE-2026-63145
CWE-863 Low
No
No
8.19.19, 9.3.8, 9.4.4 22.07.2026 SB2026072275
#VU139139 - Resource exhaustion
CVE-2026-63260
CWE-400 Low
No
No
8.19.19, 9.3.8, 9.4.4 22.07.2026 SB2026072275
#VU139138 - Resource exhaustion
CVE-2026-63261
CWE-400 Low
No
No
8.19.19, 9.3.8, 9.4.4 22.07.2026 SB2026072275
#VU139137 - Allocation of Resources Without Limits or Throttling
CVE-2026-42397
CWE-770 Low
No
No
9.3.7, 9.4.4 22.07.2026 SB2026072275
#VU139136 - Missing Authorization
CVE-2026-63141
CWE-862 Low
No
No
9.3.8, 9.4.4 22.07.2026 SB2026072275
#VU139135 - Missing Authorization
CVE-2026-63143
CWE-862 Low
No
No
9.3.8, 9.4.4 22.07.2026 SB2026072275
#VU139134 - Unintended Proxy or Intermediary ('Confused Deputy')
CVE-2026-49092
CWE-441 Low
No
No
9.4.3 22.07.2026 SB2026072275
#VU139133 - Improper Access Control
CVE-2026-56146
CWE-284 Low
No
No
9.4.3 22.07.2026 SB2026072275
#VU139132 - Authorization Bypass Through User-Controlled Key
CVE-2026-63259
CWE-639 Low
No
No
9.4.4 22.07.2026 SB2026072275
#VU139131 - Missing Authorization
CVE-2026-63262
CWE-862 Low
No
No
9.4.4 22.07.2026 SB2026072275
#VU136679 - Improper input validation
CVE-2026-56151
CWE-20 Low
No
No
8.19.17, 9.3.6, 9.4.3 02.07.2026 SB2026070217
#VU136678 - Allocation of Resources Without Limits or Throttling
CVE-2026-49087
CWE-770 Low
No
No
8.19.15, 9.3.4 02.07.2026 SB2026070216
#VU136677 - Information Exposure Through Log Files
CVE-2026-49088
CWE-532 Low
No
No
8.19.6, 9.0.8, 9.1.6 02.07.2026 SB2026070215
#VU136676 - Authorization Bypass Through User-Controlled Key
CVE-2026-49089
CWE-639 Low
No
No
8.16.3, 8.17.2 02.07.2026 SB2026070214


Showing elements 61 - 80 out of 189