Critical Vulnerabilities in Elastic Kibana Discovered by CERT-FR

Multiple vulnerabilities were discovered in Elastic Kibana on 14 August 2026, as reported by CERT-FR. These flaws enable attackers to achieve privilege escalation, remote denial of service (DoS), and data confidentiality breaches. The notice specifies no CVE identifiers or affected version ranges but confirms the impacts stem from unspecified technical weaknesses in the software. The advisory originates from France’s national cybersecurity agency, with no additional details on exploitation vectors or mitigation steps provided. No geographical or sector-specific targeting is mentioned.