PT-2026-44489

CVE-2026-33462

·

Published

2026-05-28

·

Updated

2026-09-04

Description by

CVSS 2.0
7.9
High
MetricsAV:N/AC:M/Au:S/C:N/I:C/A:C
Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)
Description A path traversal issue exists in the dashboard management functionality. An authenticated user with limited permissions can create a dashboard using a specially crafted identifier. If an administrator attempts to delete this dashboard, the request is redirected to an unintended internal endpoint, which may lead to the unauthorized deletion of user accounts or other resources.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
BIT-ELK-2026-33462
BIT-KIBANA-2026-33462
Found an issue in the description? Have something to add? Feel free to write us 👾