CVE-2026-63262
MEDIUM
NVD
CVSS Score
4.3
Severity
MEDIUM
Published
Jul 22, 2026
Vendor
unknown
Description
Missing Authorization (CWE-862) in Kibana can lead to unauthorized cross-space information disclosure via user-supplied input that circumvents space-level access control.