Threats tagged 'ghsa-xvx8-crx2-xjwv'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.3%	CVE-2026-78595Missing Authorization Medium4.3EPSS 0.3%2026-09-03GCVE DatabaseCVE-2026-78595 Missing Authorization in Kibana Leading to Information Disclosure / Missing Authorization (CWE-862) in the Kibana Fleet feature can lead to information disclosure via Privilege Abuse (CAPEC-122). An authenticated user holding read-level Fleet agent privileges in one Kibana space could enumerate agent metadata and access diagnostic content belonging to agents enrolled in other Kibana spaces. EPSS 0.3%Report on CVE-2026-78595 Vulnerability CWE-862 #ghsa-xvx8-crx2-xjwv	GCVE Database	2026-09-03

Page 1 of 1