Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-78606

Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). Where two authenticated principals originating from different authentication realms share the same username value, one could read, modify, and delete the other's private Elastic AI Assistant Knowledge Base entries.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 4.1%
CVSS Severity
CVSS v3 Score 4.2
Products affected by CVE-2026-78606
  • Elastic » Kibana » Version: Any
    cpe:2.3:a:elastic:kibana:*
  • Elastic » Kibana » Version: 8.19.11
    cpe:2.3:a:elastic:kibana:8.19.11
  • Elastic » Kibana » Version: 8.19.12
    cpe:2.3:a:elastic:kibana:8.19.12
  • Elastic » Kibana » Version: 8.19.13
    cpe:2.3:a:elastic:kibana:8.19.13
  • Elastic » Kibana » Version: 8.19.14
    cpe:2.3:a:elastic:kibana:8.19.14
  • Elastic » Kibana » Version: 8.19.15
    cpe:2.3:a:elastic:kibana:8.19.15
  • Elastic » Kibana » Version: 8.19.16
    cpe:2.3:a:elastic:kibana:8.19.16
  • Elastic » Kibana » Version: 8.19.17
    cpe:2.3:a:elastic:kibana:8.19.17
  • Elastic » Kibana » Version: 8.19.18
    cpe:2.3:a:elastic:kibana:8.19.18
  • Elastic » Kibana » Version: 8.19.19
    cpe:2.3:a:elastic:kibana:8.19.19
  • Elastic » Kibana » Version: 9.3.0
    cpe:2.3:a:elastic:kibana:9.3.0
  • Elastic » Kibana » Version: 9.3.2
    cpe:2.3:a:elastic:kibana:9.3.2
  • Elastic » Kibana » Version: 9.3.3
    cpe:2.3:a:elastic:kibana:9.3.3
  • Elastic » Kibana » Version: 9.3.4
    cpe:2.3:a:elastic:kibana:9.3.4
  • Elastic » Kibana » Version: 9.3.5
    cpe:2.3:a:elastic:kibana:9.3.5
  • Elastic » Kibana » Version: 9.3.6
    cpe:2.3:a:elastic:kibana:9.3.6
  • Elastic » Kibana » Version: 9.3.7
    cpe:2.3:a:elastic:kibana:9.3.7
  • Elastic » Kibana » Version: 9.3.8
    cpe:2.3:a:elastic:kibana:9.3.8
  • Elastic » Kibana » Version: 9.4.0
    cpe:2.3:a:elastic:kibana:9.4.0
  • Elastic » Kibana » Version: 9.4.1
    cpe:2.3:a:elastic:kibana:9.4.1
  • Elastic » Kibana » Version: 9.4.2
    cpe:2.3:a:elastic:kibana:9.4.2
  • Elastic » Kibana » Version: 9.4.3
    cpe:2.3:a:elastic:kibana:9.4.3
  • Elastic » Kibana » Version: 9.4.4
    cpe:2.3:a:elastic:kibana:9.4.4


Products
Pricing
Contact Us

Shodan ® - All rights reserved