Missing Authorization (CWE-862) in Kibana’s server-side Detection Rule Management can lead to Unauthorized Endpoint Response Action Configuration (host isolation, process termination, and process suspension) via CAPEC-1 (Accessing Functionality Not Properly Constrained by ACLs). This requires an authenticated attacker with rule management privileges.
References
| Link | Resource |
|---|---|
| https://discuss.elastic.co/t/kibana-8-19-12-9-2-6-9-3-1-security-update-esa-2026-19/385530 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
23 Mar 2026, 13:36
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Elastic
Elastic kibana |
|
| CPE | cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:* cpe:2.3:a:elastic:kibana:9.3.0:*:*:*:*:*:*:* |
|
| References | () https://discuss.elastic.co/t/kibana-8-19-12-9-2-6-9-3-1-security-update-esa-2026-19/385530 - Vendor Advisory |
19 Mar 2026, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-19 18:16
Updated : 2026-03-23 13:36
NVD link : CVE-2026-26939
Mitre link : CVE-2026-26939
CVE.ORG link : CVE-2026-26939
JSON object : View
Products Affected
elastic
- kibana
CWE
CWE-862
Missing Authorization