medium4.3
CVE-2026-63262
Missing Authorization (CWE-862) in Kibana can lead to unauthorized cross-space information disclosure via user-supplied input that circumvents space-level acce…
Impact
Missing Authorization (CWE-862) in Kibana can lead to unauthorized cross-space information disclosure via user-supplied input that circumvents space-level access control.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elastic | Kibana | from 9.4.0 before 9.4.4 |