CVE-2026-63141: Missing Authorization in Kibana Leading to Unauthorized Access to Cloud Connect Management Functions

Published Jul 21, 2026

Updated

Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Connect configuration and service settings without the required feature privileges, via direct requests to insufficiently protected product endpoints.

Affected Software

1 affected component

Elastic Kibana

Event History

Jul 21, 2026

CVE Published

via MITRE·09:08 PM

Data Sourced

via MITRE·09:08 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:19 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-63141?

CVE-2026-63141 has a medium severity rating of 6.3.

How do I fix CVE-2026-63141?

To fix CVE-2026-63141, ensure that appropriate authorization checks are implemented for accessing Cloud Connect management functions in Kibana.

What kind of access does CVE-2026-63141 allow?

CVE-2026-63141 allows an authenticated user to access and modify Cloud Connect configuration and service settings without proper feature privileges.

Which software is affected by CVE-2026-63141?

CVE-2026-63141 affects Elastic Kibana.

When was CVE-2026-63141 published?

CVE-2026-63141 was published on July 21, 2026.

CVE-2026-63141: Missing Authorization in Kibana Leading to Unauthorized Access to Cloud Connect Management Functions

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-63141?

How do I fix CVE-2026-63141?

What kind of access does CVE-2026-63141 allow?

Which software is affected by CVE-2026-63141?

When was CVE-2026-63141 published?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-63141?

How do I fix CVE-2026-63141?

What kind of access does CVE-2026-63141 allow?

Which software is affected by CVE-2026-63141?

When was CVE-2026-63141 published?