Loading market data...
← Back to CVE feed

CVE-2026-78584

MEDIUM CVSS 4.3 View on NVD ↗

Description

Observable Response Discrepancy (CWE-204) in the Kibana Osquery feature can lead to information disclosure via Query System for Information (CAPEC-54). An authenticated user holding Osquery live-query privileges could determine whether a scheduled query identifier exists in a Kibana space they are not authorized to access.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Published: Sep 02, 2026 15:17 UTC Modified: Sep 02, 2026 19:23 UTC