CVE-2026-56146

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description Improper Access Control allows a low-privileged authenticated user with read-only Security Solution access to perform write operations on Entity Analytics Watchlist configuration, which should require elevated privileges. This issue may lead to unauthorized modification of watchlist data and potential information disclosure, allowing users to access data beyond their authorized scope under specific deployment conditions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.