Threats Tagged 'bit-kibana-2026-72671'
View all threats tagged with 'bit-kibana-2026-72671'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'bit-kibana-2026-72671'
Click on any threat for detailed analysis and mitigation recommendations
Elk: Missing Authorization in Kibana Leading to Unauthorized Modification of Machine Learning Trained Model Space Assignments (CVE-2026-72671)CVE-2026-72671 0 Kibana contains a vulnerability in its Machine Learning capability where insufficient authorization checks allow users with privileges to create anomaly detection and data frame analytics jobs—but without trained model privileges—to remove trained machine learning models from a space. The trained model itself is not deleted and remains accessible in other spaces. This modification can be reversed by users with appropriate privileges. The issue affects Kibana versions from 8.0.0 up to but not including 8.19.20, and from 9.0.0 up to but not including 9.4.5. A patch is available to address this vulnerability. Join the discussion | GCVE Database | 08/19/2026, 08:40:41 UTC Added: 08/19/2026, 13:50:34 UTC |
Showing 1 to 1 of 1 result