CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
CVE details

CVE-2026-33463

Operation on a Resource after Expiration or Termination (CWE-672) in Kibana can lead to unauthorized information disclosure. A logic error in how expiration timestamps were validated allowed a time-bounded access token to remain usable beyond its intended validity window, enabling an unauthenticated actor in possession of the token to retrieve the associated content after expiration.

Score
5.3 medium
Published
2026-05-28
Links
NVD · cve.org

Matched ports (2)

PortPackageVersionStatusMaintainer
textproc/kibana91kibana919.1.10unaddressedelastic@FreeBSD.org
textproc/kibana92kibana929.2.8unaddressedelastic@FreeBSD.org

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>kibana91</name>
	<range><lt>8.19.16</lt></range>
      </package>
      <package>
	<name>kibana92</name>
	<range><lt>8.19.16</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>Operation on a Resource after Expiration or Termination (CWE-672) in
	Kibana can lead to unauthorized information disclosure. A logic error
	in how expiration timestamps were validated allowed a time-bounded
	access token to remain usable beyond its intended validity window,
	enabling an unauthenticated actor in possession of the token to
	retrieve the associated content after expiration.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2026-33463</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2026-33463</url>
    </references>
    <dates>
      <discovery>2026-05-28</discovery>
      <entry>2026-10-26</entry>
    </dates>
  </vuln>