Beveiligingsadvies

CVE-2026-49093

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-28 19:51:32
Laatst bijgewerkt 2026-05-29 16:47:16
Toegewezen door elastic
CVSS-score 6.3
Status PUBLISHED

Beschrijving

Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowlist, causing the Kibana server to issue outbound requests to destinations the egress controls were intended to block.