{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"Kibana versions 8.x ant\u00e9rieures \u00e0 8.19.20","product":{"name":"Kibana","vendor":{"name":"Elastic","scada":false}}},{"description":"Kibana versions 9.x ant\u00e9rieures \u00e0 9.4.5","product":{"name":"Kibana","vendor":{"name":"Elastic","scada":false}}},{"description":"Kibana versions 9.5.x ant\u00e9rieures \u00e0 9.5.1","product":{"name":"Kibana","vendor":{"name":"Elastic","scada":false}}}],"affected_systems_content":"","content":"## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des correctifs (cf. section Documentation).","cves":[{"name":"CVE-2026-72659","url":"https://www.cve.org/CVERecord?id=CVE-2026-72659"},{"name":"CVE-2026-72632","url":"https://www.cve.org/CVERecord?id=CVE-2026-72632"},{"name":"CVE-2026-72643","url":"https://www.cve.org/CVERecord?id=CVE-2026-72643"},{"name":"CVE-2026-72675","url":"https://www.cve.org/CVERecord?id=CVE-2026-72675"},{"name":"CVE-2026-72655","url":"https://www.cve.org/CVERecord?id=CVE-2026-72655"},{"name":"CVE-2026-72665","url":"https://www.cve.org/CVERecord?id=CVE-2026-72665"},{"name":"CVE-2026-72663","url":"https://www.cve.org/CVERecord?id=CVE-2026-72663"},{"name":"CVE-2026-72629","url":"https://www.cve.org/CVERecord?id=CVE-2026-72629"},{"name":"CVE-2026-72669","url":"https://www.cve.org/CVERecord?id=CVE-2026-72669"},{"name":"CVE-2026-72666","url":"https://www.cve.org/CVERecord?id=CVE-2026-72666"},{"name":"CVE-2026-72680","url":"https://www.cve.org/CVERecord?id=CVE-2026-72680"},{"name":"CVE-2026-72674","url":"https://www.cve.org/CVERecord?id=CVE-2026-72674"},{"name":"CVE-2026-72650","url":"https://www.cve.org/CVERecord?id=CVE-2026-72650"},{"name":"CVE-2026-72631","url":"https://www.cve.org/CVERecord?id=CVE-2026-72631"},{"name":"CVE-2026-72630","url":"https://www.cve.org/CVERecord?id=CVE-2026-72630"},{"name":"CVE-2026-72681","url":"https://www.cve.org/CVERecord?id=CVE-2026-72681"},{"name":"CVE-2026-72660","url":"https://www.cve.org/CVERecord?id=CVE-2026-72660"},{"name":"CVE-2015-8131","url":"https://www.cve.org/CVERecord?id=CVE-2015-8131"},{"name":"CVE-2026-72664","url":"https://www.cve.org/CVERecord?id=CVE-2026-72664"},{"name":"CVE-2026-49089","url":"https://www.cve.org/CVERecord?id=CVE-2026-49089"},{"name":"CVE-2026-72653","url":"https://www.cve.org/CVERecord?id=CVE-2026-72653"},{"name":"CVE-2026-72677","url":"https://www.cve.org/CVERecord?id=CVE-2026-72677"},{"name":"CVE-2026-72661","url":"https://www.cve.org/CVERecord?id=CVE-2026-72661"},{"name":"CVE-2026-72651","url":"https://www.cve.org/CVERecord?id=CVE-2026-72651"},{"name":"CVE-2026-72671","url":"https://www.cve.org/CVERecord?id=CVE-2026-72671"},{"name":"CVE-2026-72667","url":"https://www.cve.org/CVERecord?id=CVE-2026-72667"},{"name":"CVE-2026-72670","url":"https://www.cve.org/CVERecord?id=CVE-2026-72670"},{"name":"CVE-2026-72658","url":"https://www.cve.org/CVERecord?id=CVE-2026-72658"},{"name":"CVE-2026-72672","url":"https://www.cve.org/CVERecord?id=CVE-2026-72672"},{"name":"CVE-2026-72673","url":"https://www.cve.org/CVERecord?id=CVE-2026-72673"}],"links":[],"reference":"CERTFR-2026-AVI-1020","revisions":[{"description":"Version initiale","revision_date":"2026-08-14T00:00:00.000000"}],"risks":[{"description":"D\u00e9ni de service \u00e0 distance"},{"description":"Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"},{"description":"Atteinte \u00e0 l'int\u00e9grit\u00e9 des donn\u00e9es"},{"description":"Contournement de la politique de s\u00e9curit\u00e9"},{"description":"Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"},{"description":"\u00c9l\u00e9vation de privil\u00e8ges"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Elastic Kibana. Certaines d'entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.","title":"Multiples vuln\u00e9rabilit\u00e9s dans Elastic Kibana","vendor_advisories":[{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389523","url":"https://discuss.elastic.co/t/kibana-8-19-20-9-4-5-security-update-esa-2026-110/389523"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389517","url":"https://discuss.elastic.co/t/kibana-8-19-20-9-3-8-and-9-4-5-security-update-esa-2026-101/389517"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389539","url":"https://discuss.elastic.co/t/kibana-9-4-5-9-5-1-security-update-esa-2026-128/389539"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389530","url":"https://discuss.elastic.co/t/kibana-8-19-20-9-4-5-9-5-1-security-update-esa-2026-126/389530"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389511","url":"https://discuss.elastic.co/t/kibana-8-19-20-9-4-5-security-update-esa-2026-137/389511"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389519","url":"https://discuss.elastic.co/t/kibana-8-19-20-9-4-5-security-update-esa-2026-100/389519"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389527","url":"https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-95/389527"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389524","url":"https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-87/389524"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389516","url":"https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-98/389516"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389522","url":"https://discuss.elastic.co/t/kibana-8-19-20-9-4-5-security-update-esa-2026-106/389522"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389513","url":"https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-102/389513"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389528","url":"https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-96/389528"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389536","url":"https://discuss.elastic.co/t/kibana-9-4-5-security-update-esa-2026-89/389536"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389525","url":"https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-88/389525"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389532","url":"https://discuss.elastic.co/t/kibana-8-19-20-9-4-5-9-5-1-security-update-esa-2026-129/389532"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389512","url":"https://discuss.elastic.co/t/kibana-8-19-17-9-3-6-9-4-3-security-update-esa-2026-94/389512"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389538","url":"https://discuss.elastic.co/t/kibana-9-4-5-9-5-1-security-update-esa-2026-124/389538"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389529","url":"https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-99/389529"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389520","url":"https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-104/389520"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389534","url":"https://discuss.elastic.co/t/kibana-9-4-4-security-update-esa-2026-83/389534"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389535","url":"https://discuss.elastic.co/t/kibana-9-4-5-security-update-esa-2026-82/389535"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389515","url":"https://discuss.elastic.co/t/kibana-8-19-19-and-9-4-5-security-update-esa-2026-86/389515"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389526","url":"https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-92/389526"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389514","url":"https://discuss.elastic.co/t/kibana-8-19-19-9-3-8-9-4-4-security-update-esa-2026-108/389514"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389518","url":"https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-4-security-update-esa-2026-90/389518"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389521","url":"https://discuss.elastic.co/t/kibana-8-19-20-and-9-4-5-security-update-esa-2026-105/389521"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389531","url":"https://discuss.elastic.co/t/kibana-8-19-20-9-4-5-9-5-1-security-update-esa-2026-127/389531"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389537","url":"https://discuss.elastic.co/t/kibana-9-4-5-security-update-esa-2026-97/389537"},{"published_at":"2026-08-13","title":"Bulletin de s\u00e9curit\u00e9 Elastic 389533","url":"https://discuss.elastic.co/t/kibana-9-3-8-9-4-4-security-update-esa-2026-91/389533"}]}