CVE-2026-72641— Incorrect Authorization in Kibana Leading to Unauthorized Modification of Data
Quick assessment
Affected
Elastic Kibana
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Elastic Kibana是荷兰Elastic公司开源的一个视觉化仪表板。 Elastic kibana 9.4.0至9.4.5版本和9.5.0版本存在授权问题漏洞，该漏洞源于授权不正确，可能导致已认证用户仅持有Security Solution读取权限时枚举并更改Entity Store维护任务的状态，静默禁用Entity Analytics维护，从而实现未经授权的数据修改。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-72641
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Incorrect Authorization in Kibana Leading to Unauthorized Modification of Data
Source: CVE Program / CVE List V5
Vulnerability Description
Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized modification of data via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user holding only Security Solution read access in a Kibana space could enumerate and change the state of Entity Store maintainer tasks, silently disabling Entity Analytics maintenance for that space.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不正确
Source: CVE Program / CVE List V5
Vulnerability Title
Elastic kibana 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Elastic Kibana是荷兰Elastic公司开源的一个视觉化仪表板。 Elastic kibana 9.4.0至9.4.5版本和9.5.0版本存在授权问题漏洞，该漏洞源于授权不正确，可能导致已认证用户仅持有Security Solution读取权限时枚举并更改Entity Store维护任务的状态，静默禁用Entity Analytics维护，从而实现未经授权的数据修改。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-72641
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-72641
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-72641 (1)
Same Patch Batch · Elastic · 2026-09-01 · 20 CVEs total
| CVE-2026-72649 | 8.8 HIGH | Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution |
| CVE-2026-63137 | 8.3 HIGH | Incorrect Authorization in Kibana Leading to Privilege Escalation |
| CVE-2026-78592 | 7.3 HIGH | Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthori |
| CVE-2024-14047 | 7.2 HIGH | Improper Link Resolution Before File Access ('Link Following') in Winlogbeat Leading to Ar |
| CVE-2026-33465 | 6.5 MEDIUM | Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Servic |
| CVE-2026-63138 | 6.5 MEDIUM | Improper Neutralization of Special Elements in Data Query Logic in Kibana Leading to Infor |
| CVE-2026-78608 | 6.5 MEDIUM | Missing Authorization in Kibana Leading to Information Disclosure |
| CVE-2026-72654 | 6.5 MEDIUM | Execution with Unnecessary Privileges in Kibana Leading to Information Disclosure |
| CVE-2026-72628 | 6.5 MEDIUM | Improper Handling of Highly Compressed Data in Kibana Leading to Denial of Service |
| CVE-2026-72652 | 6.5 MEDIUM | Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Servic |
| CVE-2026-72644 | 6.5 MEDIUM | Uncaught Exception in Kibana Leading to Denial of Service |
| CVE-2026-72682 | 6.5 MEDIUM | Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Servic |
| CVE-2026-78605 | 5.9 MEDIUM | Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Elasticsearch L |
| CVE-2026-78607 | 5.4 MEDIUM | Missing Authorization in Elasticsearch Leading to Information Disclosure |
| CVE-2026-56143 | 4.9 MEDIUM | Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of |
| CVE-2026-72633 | 4.3 MEDIUM | Incorrect Authorization in Kibana Leading to Unauthorized Disabling of Privilege Monitorin |
| CVE-2026-78603 | 4.3 MEDIUM | Missing Authorization in Kibana Leading to Unauthorized Disclosure of Fleet Deployment Met |
| CVE-2026-78597 | 4.3 MEDIUM | Missing Authorization in Kibana Entity Store Leading to Unauthorized API Key Creation |
| CVE-2026-78606 | 4.2 MEDIUM | Incorrect Authorization in Kibana Leading to Unauthorized Disclosure, Modification, and De |
IV. Related Vulnerabilities
Same product: Kibana
-
CVE-2026-102412
Incorrect Authorization in Kibana Leading to Sensitive Infor -
CVE-2026-102410
Missing Authorization in Kibana Leading to Information Discl -
CVE-2026-102406
Authorization Bypass Through User-Controlled Key in Kibana L -
CVE-2026-94400
Uncontrolled Resource Consumption in Kibana Leading to denia -
CVE-2026-78582
Missing Authorization in Kibana Leading to Unauthorized Dele
Same vendor: Elastic
-
CVE-2026-103009
Authorization Bypass Through User-Controlled Key in Elastics -
CVE-2026-103008
Uncontrolled Recursion in Elasticsearch Leading to Denial of -
CVE-2026-103007
Incorrect Authorization in Elasticsearch Leading to Privileg -
CVE-2026-103006
Uncontrolled Recursion in Elasticsearch Leading to Denial of -
CVE-2026-103005
Memory Allocation with Excessive Size Value in Elasticsearch
Same weakness: CWE-863
-
CVE-2026-113357
@e2e-dev/github before 0.4.1 CI Report Hijacking via Predict -
CVE-2026-113354
Dockhand before 1.0.46 Arbitrary File Read via /api/system/f -
CVE-2026-12489
Zyxel EX3501-T0 5.44 认证绕过漏洞 -
CVE-2026-112776
Craft CMS 5.0.0 before 5.11.0 GraphQL Site-Scope Bypass via -
CVE-2026-112769
Parse Server before 8.6.98 and 9.x before 9.10.3-alpha.1 Ses
V. Comments for CVE-2026-72641
No comments yet