Important: Elastic Stack security update
Type/Severity
NetEye Product Security has rated this update as having a Medium security impact.
Topic
An update for the Kibana package is now available for NetEye 4.
Security Fix for NetEye 4.48
9.4.3_neteye3.101.2-1
CVEs
- CVE-2026-56148
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVE-2026-56149
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - CVE-2026-56151
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
All of the 3 CVEs are Denial of Service vulnerabilities that affect Kibana, within the Elastic Stack.
Affected Products
All NetEye 4.x versions >= 4.31.
References
- https://neteye.guide/current/security-policy/bugfix-policy.html#severity-levels
- https://discuss.elastic.co/t/elasticsearch-8-19-17-9-3-6-9-4-3-security-update-esa-2026-42/387439
- https://discuss.elastic.co/t/elasticsearch-8-19-17-9-3-6-9-4-3-security-update-esa-2026-43/387440
- https://discuss.elastic.co/t/kibana-8-19-17-9-3-6-9-4-3-security-update-esa-2026-45/387442
Gabriele Bocchi
Software Engineer - IT System & Service Management Solutions at Würth IT Italy
Author
