Important: Elastic Stack security update
Type/Severity
NetEye Product Security has rated this update as having a Medium security impact.
Topic
An update for the Kibana package is now available for NetEye 4.
Security Fix for NetEye 4.46
9.2.6_neteye3.90.8-1
CVEs
- CVE-2026-26934
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVE-2026-26935
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVE-2026-26936
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - CVE-2026-26937
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
All of the 4 CVEs are Denial of Service vulnerabilities that affect Kibana, within the Elastic Stack.
Affected Products
All NetEye 4.x versions >= 4.31.
References
- https://neteye.guide/current/security-policy/bugfix-policy.html#severity-levels
- https://discuss.elastic.co/t/kibana-8-19-12-9-2-6-9-3-1-security-update-esa-2026-12/385248
- https://discuss.elastic.co/t/kibana-8-19-12-9-2-6-9-3-1-security-update-esa-2026-13/385249
- https://discuss.elastic.co/t/kibana-8-19-11-9-2-5-security-update-esa-2026-14/385250
- https://discuss.elastic.co/t/kibana-8-19-11-9-2-5-security-update-esa-2026-15/385251
Damiano Chini
Author
Latest posts by Damiano Chini
30. 12. 2025
Automation, Development, Log Management, Log-SIEM, NetEye
Optimizing Rolling Restarts in Elasticsearch Clusters
24. 12. 2025
APM, Log-SIEM, Machine Learning, NetEye, Real User Experience
Root Cause Analysis with Elastic ML and Alyvix