CVE-2026-78593
An insufficiently validated configuration field in Kibana's Cribl integration allows an authenticated user holding Kibana Fleet management privileges to inject attacker-controlled expressions into a server-side script template, resulting in an Elasticsearch ingest pipeline being written beyond the caller's authorized Elasticsearch permissions.
- Published Sep 3, 2026
- CVSS 4.3 medium
- 0.3% chance of exploitation in the next 30 days (EPSS)