Skip to content
THREATWIRE

CVE Tracker

CVE-2019-7609

Kibana Arbitrary Code Execution

IN CISA KEV

Kibana contain an arbitrary code execution flaw in the Timelion visualizer.

Vendor
Elastic
Product
Kibana
CVSS
No score recorded (no NVD record loaded for this entry)
Published
Not recorded
NVD modified
Not recorded

CISA KEV

Date added
2022-01-10
Due date
2022-07-10
Ransomware use
Unknown
Required action
Apply updates per vendor instructions.

EPSS

95.3% chance of exploitation in the next 30 days (percentile 99th)

FIRST EPSS, updated 17 Oct 2026. About EPSS

CVSS is severity, EPSS is likelihood, KEV means already exploited. EPSS is a statistical probability, not a certainty: a low score does not make a bug safe, and a high one does not prove it is being exploited.

Data last updated 18 Oct 2026. Sources: NVD API 2.0, CISA KEV catalog, FIRST EPSS. Links: NVD, CISA KEV. Metadata only. ThreatWire does not host exploit code.