Beveiligingsadvies

CVE-2026-72641

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-01 19:20:23

Laatst bijgewerkt 2026-09-01 19:42:33

Toegewezen door elastic

CVSS-score 5.4

Status PUBLISHED

Beschrijving

Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized modification of data via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user holding only Security Solution read access in a Kibana space could enumerate and change the state of Entity Store maintainer tasks, silently disabling Entity Analytics maintenance for that space.

← Alle CVE's bekijken Bekijk op cve.org ↗