PT-2026-63264

CVE-2026-63259

Published

2026-07-21

Updated

2026-09-04

Description by

CVSS 3.1

4.3

Medium

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description An authorization bypass occurs when user-controlled keys are used, allowing an attacker to disclose information. This happens via user-supplied identifiers that reference scheduled query result data from Kibana Spaces that the requester is not authorized to access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Vendors

Affected products

Weakness enumeration

CWE-639: Authorization Bypass Through User-Controlled Key

Related identifiers

CVE-2026-63259

BDU:2026-15389

BIT-ELK-2026-63259