AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

ElasticCVE-2026-82298

Elastic Kibana: improper authorization

Elastic

CVE-2026-82298 · Published Sep 3, 2026 · updated Sep 8, 2026

Medium4.3
No fix yet
Elastic advisory

Incorrect Authorization (CWE-863) in Kibana can lead to denial of service via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180).

Affected versions

PackageAffectedFixed in
Kibana
Product
>= 8.0.0, <= 8.19.20No fix yet
>= 9.0.0, <= 9.4.5No fix yet
>= 9.5.0, <= 9.5.2No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-863

More Elastic advisories

All Elastic
Medium 6.5Sep 3Elastic Kibana: improper authorizationCVE-2026-82299no fix yetHigh 8.1Sep 3Elastic Kibana: improper authorizationCVE-2026-82302no fix yetHigh 8.1Sep 3Elastic Kibana: improper authorizationCVE-2026-78583no fix yetMedium 4.3Sep 3Elastic Kibana: code injectionCVE-2026-78593no fix yetMedium 4.3Sep 3Elastic Kibana: missing authorizationCVE-2026-78595no fix yetMedium 4.3Sep 3Elastic Kibana: missing authorizationCVE-2026-78596no fix yet