This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-82293 | BDVDB-2026-367421 Detail

ElasticKibana

Description#

Incorrect Authorization (CWE-863) in the Kibana machine learning feature can lead to unauthorized resource consumption via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). An authenticated user could invoke machine learning functionality beyond their authorization scope, consuming cluster resources they should not be able to reach.

Impact#

CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels

Weaknesses#

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.