EIQ-2026-0012#
ID |
EIQ-2026-0012 |
|---|---|
CVE |
Multiple (see assessment) |
Description |
Cumulative Kibana vulnerabilities |
Date |
30 August 2026 |
Severity |
1 - LOW |
Status |
⏲ |
Assessment |
This advisory consolidates 23 Kibana security advisories published by Elastic in August 2026, covering Kibana versions up to and including 8.19.19. These vulnerabilities have a low risk of exploitation. EclecticIQ Intelligence Center does not exercise the affected features in normal operations. Kibana is only accessible by authenticated IC users with at least The list of Kibana advisories by Elastic covered by this EIQ advisory is below:
|
Mitigation |
Upgrade to IC 3.8.1 or newer, when available. IC 3.8.1 ships with Kibana 9.4.5. Kibana is only accessible by authenticated EclecticIQ Intelligence Center users who have at least External access to Kibana’s REST API or to port 5601 is not available by default in Intelligence Center deployments. Administrators should restrict direct access to the Kibana REST API to only trusted hosts and services. Do not expose Kibana (port 5601) to end users or untrusted networks. To further harden your Kibana instance, you can disable the affected Kibana features by adding the following to # ESA-2026-99
vis_type_vega.enabled: false
# ESA-2026-98
xpack.observabilityLogsExplorer.enabled: false
# ESA-2026-90
xpack.uptime.enabled: false
# ESA-2026-100
vis_type_timelion.enabled: false
# ESA-2026-101
xpack.securitySolution.enabled: false
# ESA-2026-104
vis_type_timeseries.enabled: false
# ESA-2026-63
xpack.canvas.enabled: false
To limit the impact of resource consumption attacks on Kibana, create a systemd memory limit drop-in at [Service]
MemoryHigh=2000M
MemoryMax=3000M
|
Affected versions |
EIQ Intelligence Center 3.7.2 and older, or any instance using Kibana versions up to 8.19.19 (inclusive) or 9.x up to 9.4.4 (inclusive). |
Notes |
N/A |