Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-4799

Open redirect vulnerability in Search Guard Kibana Plugin via manipulated requests

In Search Guard FLX up to version 4.0.1, it is possible to use specially crafted requests to redirect the user to an untrusted URL.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Floragunn Search-guard
Products
Search Guard Flx Flx
CVE-2026-4818

Some management operations on data streams are not properly restricted when user does not have the necessary privileges

In Search Guard FLX versions from 3.0.0 up to 4.0.1, there exists an issue which allows users without the necessary privileges to execute some management operations against data streams.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Floragunn Search-guard
Products
Search Guard Flx Flx
CVE-2026-4819

Search Guard audit logs can contain under certain conditions user credentials

In Search Guard FLX versions from 1.0.0 up to 4.0.1, the audit logging feature might log user credentials from users logging into Kibana.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Floragunn Search-guard
Products
Search Guard Flx Flx