Security Advisory

CVE-2026-63141

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-21 21:08:36

Last updated 2026-07-22 19:39:06

Assigner elastic

CVSS score 6.3

State PUBLISHED

Description

Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints.

← Browse all CVEs View on cve.org ↗