CVE Intelligence

Elastic Endpoint Security vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Elastic Endpoint Security: 1 record(s), with affected versions and fixes.
cpe:2.3:a:elastic:endpoint_security

CVE-2026-56152 Medium · 5.3 CWE-863 Jul 1, 2026
Incorrect Authorization in Kibana Leading to Information Disclosure
Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). Under certain conditions, a low-privileged authenticated user can access response action data that they are not authorized to view.