textproc/kibana95: New port: Browser-based analytics and search interface to Elasticsearch 9.5.x Release Notes: https://www.elastic.co/docs/release-notes/kibana#kibana-9.5.4-release-notes PR: 297679 Approved by: elastic (implicit, inactive for several months again) Sponsored by: UNIS Labs7bac8c4aa2
Port details
textproc/kibana95 9.5.4
Browser-based analytics and search interface to Elasticsearch (9.5.x version)
Port info
- Maintainer
- elastic@FreeBSD.org
- Packages
- latest: 9.5.4
- Upstream
- Higher version available: 9.5.5
- Last update
- to 9.5.4 · 7bac8c4aa2
- Quarterly
- 2026Q4: 9.5.4
- WWW
- https://www.elastic.co/products/kibana
- Links
- cgit · VuXML
Install
- Package
# pkg install kibana95installs 9.5.4 fromlatest; fromquarterly(2026Q4) 9.5.4- Port
# cd /usr/ports/textproc/kibana95 && make install clean- Size
- 232 MiB download · 1.1 GiB installed
- Depends on
- devel/libuv 1.52.1, devel/re2 20251105, www/node24 24.21.0_3
- License
- APACHE20
- Creates
- user
www, groupwww - pkg-message
Shown after installing
NOTICE: This port installs Kibana-specific utilities as symbolic links into /usr/local/bin.
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 9.5.4 | 9.5.4 | – |
| FreeBSD 15 | 9.5.4 | 9.5.4 | – |
| FreeBSD 14 | 9.5.4 | 9.5.4 | 9.5.4 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 9.5.4 | 9.5.4 | – |
| FreeBSD 14 | 9.5.4 | 9.5.4 | 9.5.4 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed (1)
The CVE record lists the packaged version 9.5.4 as affected, and no VuXML entry names the CVE. What does this mean?
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-102412 | 6.5 | 2026-10-06 | Incorrect Authorization (CWE-863) in Kibana can lead to sensitive information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authe… |
VuXML only (0)
Listed in VuXML, the packaged version 9.5.4 is still in the affected range; pkg audit reports it. What does this mean?
None.
Fixed (16)
Show 16 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
| CVE | CVSS | Published | Description |
|---|---|---|---|
| CVE-2026-102406 | 8.8 | 2026-10-06 | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception. In this context, "tenant" refers to a user or team sha… |
| CVE-2026-78583 | 8.1 | 2026-09-03 | Incorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Input Data Manipulation (CAPEC-153). Elasticsearch cluster privilege declarations origin… |
| CVE-2026-82302 | 8.1 | 2026-09-03 | Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized configuration modification via Exploiting Incorrectly Configured Access Control Security Levels (CAP… |
| CVE-2026-94400 | 6.5 | 2026-09-26 | Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130) |
| CVE-2026-78582 | 6.5 | 2026-09-26 | Missing Authorization (CWE-862) in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). An … |
| CVE-2026-82299 | 6.5 | 2026-09-03 | Incorrect Authorization (CWE-863) in Kibana can lead to information disclosure via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). |
| CVE-2026-78608 | 6.5 | 2026-09-01 | Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Privilege Abuse (CAPEC-122). An authorization control was not applied to an internal Kib… |
| CVE-2026-72654 | 6.5 | 2026-09-01 | Execution with Unnecessary Privileges (CWE-250) in the Kibana machine learning feature can lead to information disclosure via Privilege Abuse (CAPEC-122). An operation a… |
| CVE-2026-72628 | 6.5 | 2026-09-01 | Improper Handling of Highly Compressed Data (CWE-409) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding Strea… |
| CVE-2026-82298 | 4.3 | 2026-09-03 | Incorrect Authorization (CWE-863) in Kibana can lead to denial of service via Exploiting Incorrectly Configured Access Control Security Levels (CAPEC-180). |
| CVE-2026-78596 | 4.3 | 2026-09-03 | Missing Authorization in Kibana Leading to Unauthorized Modification of Data / Missing Authorization (CWE-862) in Kibana can lead to unauthorized modification of data vi… |
| CVE-2026-78595 | 4.3 | 2026-09-03 | Missing Authorization in Kibana Leading to Information Disclosure / Missing Authorization (CWE-862) in the Kibana Fleet feature can lead to information disclosure via Pr… |
| CVE-2026-78593 | 4.3 | 2026-09-03 | An insufficiently validated configuration field in Kibana's Cribl integration allows an authenticated user holding Kibana Fleet management privileges to inject attacker-… |
| CVE-2026-82293 | 4.3 | 2026-09-02 | Incorrect Authorization (CWE-863) in the Kibana machine learning feature can lead to unauthorized resource consumption via Exploiting Incorrectly Configured Access Contr… |
| CVE-2026-72633 | 4.3 | 2026-09-01 | Incorrect Authorization (CWE-863) in Kibana Entity Analytics can lead to a loss of security monitoring via Accessing Functionality Not Properly Constrained by ACLs (CAPE… |
| CVE-2026-78606 | 4.2 | 2026-09-01 | Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized disclosure, modification, and deletion of data via Accessing Functionality Not Properly Constrained … |
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (2)
textproc/kibana95: Repocopy from textproc/kibana94 PR: 297679 Approved by: elastic (implicit, inactive for several months again) Sponsored by: UNIS Labs09195e4822