Medium 6.3Published Jul 21, 2026

CVE-2026-63141Missing Authorization in Kibana Leading to Unauthorized Access to Cloud Connect Management Functions

Updated under an hour ago (Oct 26, 2026, 5:30 PM ET)

Does this affect you?

It affects Elastic Kibana. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Elastic Kibana

Exploited in the last 30 days

Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints.

CVSS: 6.3 MEDIUM (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weakness (CWE): CWE-862
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: elastic
NVD analysis: Analyzed
Record last updated: Jul 22, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Elastic Kibana elastic:kibana (from the name)	from 9.4.0 through 9.4.3; from 9.3.0 through 9.3.7	CNA record
elastic kibana elastic:kibana	from 9.3.0 before 9.3.8; from 9.4.0 before 9.4.4	NVD

References

References

https://discuss.elastic.co/t/kibana-9-3-8-9-4-4-security-update-esa-2026-65/388566	vendor-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.