CVE-2026-63142

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description An issue involving an incomplete list of disallowed inputs in the Reporting feature allows an authenticated attacker to bypass outbound request restrictions. This can lead to Server-Side Request Forgery (SSRF), a condition where the reporting service is forced to send requests to network destinations that are prohibited by the administrator's security policy.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.