Kibana and Logstash vulnerabilities and fixes

CVEs that mention Kibana and Logstash, ranked by priority. 2 tracked.

Kibana and Logstash has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-09-22. Highest priority: CVE-2026-77619 (score 46/100).

• CVE-2026-77619 HIGH 8.7 Vector is a high-performance observability data pipeline
• CVE-2026-77620 HIGH 8.7 Vector is a high-performance observability data pipeline

FAQ

How do I fix Kibana and Logstash vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Kibana and Logstash being exploited right now?

None of the tracked Kibana and Logstash CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which Kibana and Logstash CVE should I patch first?

CVE-2026-77619 currently ranks highest (46/100): Vector is a high-performance observability data pipeline.

← Back to latest CVEs