CVE-2026-56146: Elastic Kibana

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper Access Control (CWE-284) in Kibana can lead to unauthorized modification of Entity Analytics Watchlist configuration and potential information disclosure. A low-privileged authenticated user with read-only Security Solution access could perform write operations on watchlist data that should require elevated privileges. Under specific deployment conditions, this could also allow such a user to access data beyond their authorized scope.

Affected products

• Elastic Kibana: from 9.4.0, before 9.4.3 (fixed in 9.4.3)

Published 2026-07-21. Last modified 2026-08-06.