03. 09. 2026 Patrick Harasser Bug Fixes, NetEye

NetEye 4 – Security Advisory (Elastic Stack)

Important: Elastic Stack security update

Type/Severity

NetEye Product Security has rated this update as having a High security impact.

Topic

Updates for the Elastic Stack packages are now available for NetEye 4.

Security Fix for NetEye 4.49

  • 9.4.6_neteye3.103.8-1

CVEs

Elastic Agent

  1. CVE-2026-78604
    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Kibana

  1. CVE-2026-78608
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
  2. CVE-2026-72654
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
  3. CVE-2026-72628
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  4. CVE-2026-72682
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  5. CVE-2026-72641
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
  6. CVE-2026-78603
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
  7. CVE-2026-82293
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
  8. CVE-2026-78597
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
  9. CVE-2026-72633
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
  10. CVE-2026-78606
    CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Most of the 11 CVEs are authorization and access control weaknesses affecting Kibana, including Missing/Incorrect Authorization (Fleet metadata disclosure, ML resource abuse, Entity Store API key creation, APM credential disclosure, AI Assistant Knowledge Base tampering, unauthorized ML data reads, disabled Entity Analytics monitoring) and resource-exhaustion issues in Agent Builder and Streams content packs, within the Elastic Stack. The remaining CVE is an Incorrect Permission Assignment for Critical Resource in Elastic Agent, affecting unprivileged Windows installations, that can lead to local privilege escalation to SYSTEM. Together, these CVEs can lead to unauthorized information disclosure, privilege escalation, data tampering, or denial of service.

Affected Products

All NetEye 4.x versions >= 4.25.

References

Patrick Harasser

Patrick Harasser

Author

Patrick Harasser

Latest posts by Patrick Harasser

20. 08. 2026 Bug Fixes, NetEye
NetEye 4.49 – Security Advisory (Icinga 2)
14. 08. 2026 Bug Fixes, NetEye
NetEye 4 – Security Advisory (Elastic Stack)
28. 07. 2026 Bug Fixes, NetEye
NetEye 4.46 – Security Advisory (Icinga 2)
28. 07. 2026 Bug Fixes, NetEye
NetEye 4.47 – Security Advisory (Icinga 2)
07. 07. 2026 Bug Fixes, NetEye
NetEye 4.48 – Security Advisory (Icinga 2)
See All

Related Content

Tags: , , ,

01. 09. 2026 Log-SIEM

Query historical data without restoring everything: using Elasticsearch searchable snapshots

Historical log data is valuable—until the cost of keeping every shard online starts competing with the value of the data itself. Elasticsearch searchable snapshots offer a practical middle ground for a NetEye installation: keep an index in a snapshot repository, Read More
26. 08. 2026 Bug Fixes, NetEye

NetEye 4 – Security Advisory (Keycloak)

Important: Keycloak security update Type/Severity NetEye Product Security has rated this update as having a critical security impact. Topic An update for the keycloak packages is now available for NetEye 4. Security Fix for NetEye 4.49 26.7.2_neteye1.46.1-1 Summary This vulnerability, tracked as CVE-2026-18963 Read More
20. 08. 2026 Bug Fixes, NetEye

NetEye 4.49 – Security Advisory (Icinga 2)

Important: Icinga 2 security update Type/Severity NetEye Product Security has rated this update as having a medium security impact. Topic An update for the icinga package is now available for NetEye 4. Security Fix for NetEye 4.49 2.15.6_neteye1.73.1-1 Summary This release fixes authorization Read More
17. 08. 2026 Bug Fixes, NetEye

Bug Fixes for NetEye 4.49

RKE2 Otel Collector DNS requirement During updates and first installations on systems where the Elastic Stack feature module was installed, an extra requirement was present. In particular, the DNS defined in the resolv.conf of the machine was required to resolve Read More
14. 08. 2026 Bug Fixes, NetEye

NetEye 4 – Security Advisory (Elastic Stack)

Important: Elastic Stack security update Type/Severity NetEye Product Security has rated this update as having a High security impact. Topic Updates for the Elastic Stack packages are now available for NetEye 4. Security Fix for NetEye 4.49 9.4.5_neteye3.103.7-1 CVEs Elasticsearch Read More

Leave a Reply

Your email address will not be published. Required fields are marked *

Search by technology

Contact

Contact us
Serviceportal

Archive