What happened
Kibana contain an arbitrary code execution flaw in the Timelion visualizer.
Affected versions
Kibana: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
SploitusExploit for CVE-2019-7069 and CVE-2019-7609. CVSS 10.Sploitus index2026-10-07T16:18:04+00:00CandidateSploitusProof-of-concept exploit for CVE-2019-7609. CVSS 10.Sploitus index2026-10-08T20:40:27+00:00CandidatePoC-in-GitHub · jas502n/kibana-RCEkibana < 6.6.0 未授权远程代码命令执行 (Need Timelion And Canvas),CVE-2019-7609★ 89jas502n2019-10-18CandidatePoC-in-GitHub · mpgn/CVE-2019-7609RCE on Kibana versions before 5.6.15 and 6.6.0 in the Timelion visualizer★ 57mpgn2019-10-21CandidatePoC-in-GitHub · LandGrey/CVE-2019-7609exploit CVE-2019-7609(kibana RCE) on right way by python2 scripts★ 165LandGrey2019-10-21CandidatePoC-in-GitHub · hekadan/CVE-2019-7609★ 20hekadan2019-12-01CandidatePoC-in-GitHub · rhbb/CVE-2019-7609★ 1rhbb2020-04-03CandidatePoC-in-GitHub · dnr6419/CVE-2019-7609Kibana Prototype Pollution★ 1dnr64192021-08-24CandidatePoC-in-GitHub · wolf1892/CVE-2019-7609docker lab setup for kibana-7609★ 0wolf18922022-02-10CandidatePoC-in-GitHub · Cr4ckC4t/cve-2019-7609Kibana <6.6.0 RCE written in python3★ 4Cr4ckC4t2022-03-17CandidatePoC-in-GitHub · d0x-awrqxavc/CVE-2019-7609-KibanaRCE★ 0d0x-awrqxavc2023-07-17CandidatePoC-in-GitHub · Akshay15-png/CVE-2019-7609Exploit for CVE-2019-7609 in python★ 1Akshay15-png2024-06-01CandidatePoC-in-GitHub · aleister1102/kibana-prototype-pollusionPoC and analysis for Kibana Prototype Pollution RCE (CVE-2019-7609).★ 0aleister11022024-06-23CandidatePoC-in-GitHub · toxxxaka/CVE-2019-7609New CVE-2019-7609 which works with python 13★ 0toxxxaka2026-02-17CandidatePoC-in-GitHub · CyberCTF/vulhub-kibana-cve-2019-7609Vulhub kibana/CVE-2019-7609: Kibana Timelion Prototype Pollution RCE (CVE-2019-7609), run with Isoloom★ 0CyberCTF2026-10-08CandidateSource timeline
Discovered through CISA Known Exploited VulnerabilitiesView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.