Elastic Kibana vulnerabilities
189 published vulnerabilities in Elastic Kibana, 1 of them exploited in the wild. The most were published in 2026 (102), and 102 so far in 2026.
Elastic Kibana vulnerabilities by year
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Elastic Kibana vulnerabilities
- CVE-2019-7609 Kibana Arbitrary Code Execution
- CVE-2025-25015 Kibana arbitrary code execution via prototype pollution
- CVE-2024-37288 Deserialization in Kibana
- CVE-2023-31415 Code injection in Kibana
- CVE-2018-17245 Information disclosure in Kibana
- CVE-2018-17246 Code injection in Kibana
- CVE-2025-25014 Kibana arbitrary code execution via prototype pollution
- CVE-2024-37285 Kibana arbitrary code execution via YAML deserialization
- CVE-2024-37287 Kibana arbitrary code execution via prototype pollution
- CVE-2023-31422 Kibana Insertion of Sensitive Information into Log File
- CVE-2019-7610 Code injection in Kibana
- CVE-2026-102406 Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.