CVE-2026-56152— Incorrect Authorization in Elastic Defend Leading to Information Disclosure
Affected Version Matrix 3
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Elastic | Elastic Defend | 9.3.0≤ 9.3.1 | affected |
8.6.0≤ 8.19.12 | affected | ||
9.0.0≤ 9.2.6 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-56152
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Incorrect Authorization in Elastic Defend Leading to Information Disclosure
Source: NVD (National Vulnerability Database)
Vulnerability Description
Incorrect Authorization (CWE-863) in Elastic Defend can lead to unauthorized information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). Under certain conditions, a low-privileged authenticated user can access response action data that they are not authorized to view.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
授权机制不正确
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Elastic | Elastic Defend | 9.3.0 ~ 9.3.1 | - |
II. Public POCs for CVE-2026-56152
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-56152
请登录查看更多情报信息。
Other References for CVE-2026-56152 (1)
Same Patch Batch · Elastic · 2026-07-01 · 9 CVEs total
| CVE-2026-49091 | 8.0 HIGH | Improper Output Neutralization for Logs in Kibana Leading to Log Injection |
| CVE-2026-49090 | 6.5 MEDIUM | Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service |
| CVE-2026-49087 | 6.5 MEDIUM | Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Servic |
| CVE-2026-56150 | 6.5 MEDIUM | Allocation of Resources Without Limits or Throttling in Fleet Server Leading to Denial of |
| CVE-2026-56148 | 6.5 MEDIUM | Uncontrolled Recursion in Elasticsearch Leading to Denial of Service |
| CVE-2026-56151 | 6.5 MEDIUM | Improper Input Validation in Kibana Leading to Denial of Service |
| CVE-2026-56149 | 4.9 MEDIUM | Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of |
| CVE-2026-49088 | 4.4 MEDIUM | Insertion of Sensitive Information into Log File in Kibana Leading to Information Disclosu |
IV. Related Vulnerabilities
Same vendor: Elastic
- CVE-2026-49091
Improper Output Neutralization for Logs in Kibana Leading to - CVE-2026-49090
Uncontrolled Resource Consumption in Elasticsearch Leading t - CVE-2026-49088
Insertion of Sensitive Information into Log File in Kibana L - CVE-2026-49087
Allocation of Resources Without Limits or Throttling in Kiba - CVE-2026-56151
Improper Input Validation in Kibana Leading to Denial of Ser
Same weakness: CWE-863
- CVE-2026-54998
Microsoft Exchange Online Elevation of Privilege Vulnerabili - CVE-2026-56842
UniFi Network Application错误授权漏洞 - CVE-2026-8079
Unintended limited set of actions with elevated privileges m - CVE-2026-14340
An incorrect authorization vulnerability in GitHub Enterpris - CVE-2026-53905
Unauthorized Access to Administrator ACL View in MCO
V. Comments for CVE-2026-56152
No comments yet