CVE record · 1 source
CVE-2026-102406
CVSS 8.8Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception.
- Vendor
- Elastic
- Product
- Elasticsearch / Kibana
- CVSS
- 8.8
- Exposure class
- Database
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception.
Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception. In this context, "tenant" refers to a user or team sharing the same Kibana deployment, not a separate Elastic…