VulnSocial

CVE-2026-49088Disclosure(elastic / kibana)

LOWCVSS 4.4 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Insertion of Sensitive Information into Log File (CWE-532) in Kibana can lead to information disclosure. When the optional application performance monitoring (APM) instrumentation is enabled, sensitive request header values could be recorded in application logs, where they may be accessible to operators with log access.

elastic CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-532

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • kibana

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • 3 total mentions across 1 day

Affected systems

Vendors
elastic
Products
kibana

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-07-01: 3Technical Details · 2026-07-01: 307-01
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-49088 Insertion of Sensitive Information into Log File (CWE-532) in Kibana can lead to information disclosure. When the optional application performance monitoring (APM) in… https://www.cve.org/CVERecord?id=CVE-2026-49088 ----- Traducción: CVE-2026-49088 Ins… http://infoflow.cloud`

    Post summary

    The tweet shares a concise disclosure of CVE‑2026‑49088, highlighting that sensitive information can be logged and causing disclosure, and provides links to the official CVE record. No PoC, exploit, or patch information is included.

    0000038
    90 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-49088 Insertion of Sensitive Information into Log File (CWE-532) in Kibana can lead to information disclosure. When the optional application performance monitoring (APM) in… https://www.cve.org/CVERecord?id=CVE-2026-49088

    Post summary

    The snippet announces CVE‑2026‑49088, describing a log‑injection CVE‑532 in Kibana’s optional APM that could disclose sensitive data, without providing any PoC, exploit, patch, or evidence of active exploitation.

    00000653
    57.7K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-49088 Information Disclosure via Sensitive Data Logging in Kibana APM Instrumentation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-49088

    Post summary

    The snippet announces CVE-2026-49088, detailing it as an information disclosure issue related to sensitive data logging in Kibana APM instrumentation.

    00000108
    4.1K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appelastickibana---

Explore more

Back to dashboardelastic CVEskibana vulnerabilities