Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-78582— Missing Authorization in Kibana Leading to Unauthorized Deletion of Data

Quick assessment

Affected
Elastic Kibana
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Kibana 中存在授权缺失漏洞（CWE-862），攻击者可通过利用配置不当的访问控制安全级别（CAPEC-180）实现未授权的数据删除。具体而言，持有针对单个 Kibana 工作区（space）范围权限的合成监控（Synthetics）权限的已认证用户，可能永久删除被共享至其无权访问的其他工作区中的合成监控。此外，当某个监控关联了私有位置（private location）时，该操作还会在缺乏 Fleet 通常应执行的授权检查的情况下，同时破坏底层的 Elastic Agent 集成配置。

CVSS 6.5 · Medium EPSS 0.18% · P7
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-78582

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Missing Authorization in Kibana Leading to Unauthorized Deletion of Data
Source: CVE Program / CVE List V5
Vulnerability Description
Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). An authenticated user holding Synthetics privileges scoped to a single Kibana space could permanently delete Synthetics monitors that are shared into spaces they have no access to. Where a monitor is associated with a private location, the same operation also destroys the underlying Elastic Agent integration configuration without the authorization checks that Fleet would otherwise apply.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Elastic Kibana 7.12.0 ~ 7.17.29 -

II. Public POCs for CVE-2026-78582

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-78582

请登录查看更多情报信息。

Other References for CVE-2026-78582 (1)

Same Patch Batch · Elastic · 2026-09-26 · 11 CVEs total

CVE-2026-72668 7.3 HIGH Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Privilege Escala
CVE-2026-94397 6.5 MEDIUM Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service
CVE-2026-94396 6.5 MEDIUM Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service
CVE-2026-94400 6.5 MEDIUM Uncontrolled Resource Consumption in Kibana Leading to denial of service
CVE-2026-94399 6.5 MEDIUM Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service
CVE-2026-94398 6.5 MEDIUM Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service
CVE-2026-82300 6.5 MEDIUM Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
CVE-2026-82294 6.5 MEDIUM Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
CVE-2026-72662 6.3 MEDIUM Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Disclos
CVE-2026-94408 4.9 MEDIUM Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service

IV. Related Vulnerabilities

Same product: Kibana
Same vendor: Elastic
Same weakness: CWE-862

V. Comments for CVE-2026-78582

No comments yet

Leave a comment