CVE-2026-82298: Incorrect Authorization in Kibana Leading to Denial of Service
Published Sep 3, 2026
·Updated
Incorrect Authorization (CWE-863) in Kibana can lead to denial of service via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180).
Affected Software
1 affected component
Elastic Kibana
Event History
Sep 3, 2026
CVE Published
via MITRE·06:35 PM
Data Sourced
via MITRE·06:35 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require an authenticated account?
Yes. The attack vector indicates low privileges are required, so an unauthenticated attacker is not sufficient.
2
Does exploitation require user interaction?
No. The vulnerability is rated as requiring no user interaction and is reachable over the network.