Mmastodon TechnologyCybersecurity first seen 6 d ago, last 6 d ago, peak #4

Path traversal flaw found in Elastic Kibana Fleet feature

Original: 🚨 EUVD-2026-116075 📊 Score: 7.3/10 (CVSS v3.1) 📦 Product: Kibana, Kibana 🏢 Vendor: Elastic 📅 Updated: 2026-11-03 📝 Impro

A newly catalogued vulnerability, EUVD-2026-116075, affects Elastic's Kibana, scoring 7.3 out of 10 on the CVSS v3.1 scale. The flaw is an improper path limitation (CWE-22) in the Kibana Fleet feature, which could allow unauthorized deletion of resources through path traversal. Security teams are assessing exposure and awaiting patch guidance from Elastic.

Why now: Security feeds flagged a newly published medium-high severity vulnerability in widely deployed Elastic Kibana software.

ElasticKibanaEUVD-2026-116075

Open on mastodon →

Evidence

• 🚨 EUVD-2026-116075 📊 Score: 7.3/10 (CVSS v3.1) 📦 Product: Kibana, Kibana 🏢 Vendor: Elastic 📅 Updated: 2026-11-03 📝 Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in the Kibana Fleet feature can lead to unauthorized resource deletion via Path Traversal… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/4772525