24. 07. 2026 Gabriele Bocchi Bug Fixes, NetEye

NetEye 4 – Security Advisory (Elastic Stack)

Important: Elastic Stack security update

Type/Severity

NetEye Product Security has rated this update as having a Medium security impact.

Topic

Updates for the Elastic Stack packages are now available for NetEye 4.

Security Fix for NetEye 4.48

  • 9.4.4_neteye3.101.4-1

CVEs

Elasticsearch

  1. CVE-2026-63263
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  2. CVE-2026-63144
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  3. CVE-2026-63140
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  4. CVE-2026-56145
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  5. CVE-2026-56144
    CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Kibana

  1. CVE-2026-63262
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
  2. CVE-2026-63261
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  3. CVE-2026-63260
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  4. CVE-2026-63259
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
  5. CVE-2026-63145
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
  6. CVE-2026-63143
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
  7. CVE-2026-63142
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
  8. CVE-2026-63141
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
  9. CVE-2026-63139
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  10. CVE-2026-42397
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Most of the 15 CVEs are Denial of Service vulnerabilities affecting Elasticsearch (ES|QL, EQL, search-query parsing) and Kibana (Machine Learning, Canvas, Entity Analytics), within the Elastic Stack. The remaining CVEs relate to authorization and access-control weaknesses in Kibana, including Missing/Incorrect Authorization and an SSRF via an incomplete input denylist, that can lead to unauthorized information disclosure or integrity compromise.

Affected Products

All NetEye 4.x versions >= 4.31.

References

Gabriele Bocchi

Gabriele Bocchi

Software Engineer - IT System & Service Management Solutions at Würth IT Italy

Author

Gabriele Bocchi

Software Engineer - IT System & Service Management Solutions at Würth IT Italy

Latest posts by Gabriele Bocchi

07. 07. 2026 Bug Fixes, NetEye
NetEye 4 – Security Advisory (Elastic Stack)
01. 07. 2026 Bug Fixes, NetEye
Bug Fixes for NetEye 4.48
24. 06. 2026 Bug Fixes, NetEye
NetEye 4 – Security Advisory (GLPI)
24. 06. 2026 Bug Fixes, NetEye
Bug Fixes for NetEye 4.48
22. 06. 2026 Automation, Development, DevOps
Your GitHub Organization Is Infrastructure Too
See All

Related Content

Tags: , , ,

23. 07. 2026 Bug Fixes, NetEye

Bug Fixes for NetEye 4.48

Fix Soft States Some checks that were actually failing showed up as green/OK in Icinga. The cause: two parts of the system stored the same status in different formats, so the web interface misread it and hid early-stage problems. A Read More
16. 07. 2026 Bug Fixes, NetEye

Bug Fixes for NetEye 4.48

Fix Director self-service api We fixed the uncaught exception on bad Basic autm but in doing so we introduced a 302 redirect for API requests as well. Net result: a curl client expecting a 401 gets redirected to the login Read More
10. 07. 2026 APM, Log Management, Log-SIEM

Creating Powerful and Effective Dashboards: Tips and Best Practices

Why Dashboards Are Important In the modern IT world, simply collecting data isn't enough: Real value comes when data can be quickly interpreted and transformed into useful information. Dashboards represent the final step of a process that starts with: Data Read More
07. 07. 2026 Bug Fixes, NetEye

NetEye 4 – Security Advisory (Icinga 2)

Important: Icinga 2 security update Type/Severity NetEye Product Security has rated this update as having a critical security impact. Topic An update for the icinga package is now available for NetEye 4. Security Fix for NetEye 4.48 2.15.5_neteye1.71.2-1 Summary The vulnerabilities include an Read More
07. 07. 2026 Bug Fixes, NetEye

NetEye 4 – Security Advisory (Elastic Stack)

Important: Elastic Stack security update Type/Severity NetEye Product Security has rated this update as having a Medium security impact. Topic An update for the Kibana package is now available for NetEye 4. Security Fix for NetEye 4.48 9.4.3_neteye3.101.2-1 CVEs CVE-2026-56148CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-56149CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-56151CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H All Read More

Leave a Reply

Your email address will not be published. Required fields are marked *

Search by technology

Contact

Contact us
Serviceportal

Archive