CVE details
CVE-2026-72641
Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized modification of data via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated user holding only Security Solution read access in a Kibana space could enumerate and change the state of Entity Store maintainer tasks, silently disabling Entity Analytics maintenance for that space.
Matched ports (1)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| textproc/kibana94 | kibana94 | 9.4.7 | fixed by update | elastic@FreeBSD.org |