CVE-2026-42398 | Elastic Kibana up to 9.2.7/9.3.1 Outbound Requests server-side request forgery

May 28, 2026 Yanac

A vulnerability described as critical has been identified in Elastic Kibana up to 9.2.7/9.3.1. Affected by this vulnerability is an unknown functionality of the component Outbound Requests Handler. Such manipulation leads to server-side request forgery.

This vulnerability is listed as CVE-2026-42398. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More