CVE-2026-63137
Incorrect Authorization in Kibana Leading to Privilege Escalation
CVSS score
8.3
EPSS probability
%0.5
Risk score
0.0
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
Exploit POC for Wp2Shell, CVE-2026-63030 + CVE-2026-63137
Makefile Go / Python
Similar Vulnerabilities
6.8
CVE-2015-1427 Actively exploitedelasticsearch: remote code execution via Groovy sandbox bypass
Patch verified Public Exploits:9EPSS %100
6.8
CVE-2014-3120 Actively exploitedelasticsearch: remote code execution flaw via dynamic scripting
VendorRed HatProduct6Server-SubscriptionAssetManager14:katello-configure-0:1.4.5.1-3.el6sam.noarch+8 etkilenen
RH
Patch verified Public Exploits:7EPSS %89
9.8
CVE-2026-33466Path traversal in Elastic Logstash
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-63137"