Is CVE-2026-78593 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-78593?

CVE-2026-78593 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-78593

Description

An insufficiently validated configuration field in Kibana's Cribl integration allows an authenticated user holding Kibana Fleet management privileges to inject attacker-controlled expressions into a server-side script template, resulting in an Elasticsearch ingest pipeline being written beyond the caller's authorized Elasticsearch permissions.