Vulnerabilities

CVSS

6.5 Medium

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Risk score

52.0

Published

2026-07-21

Status

Published

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially crafted request to affected Entity Analytics endpoints containing an oversized input value that causes excessive resource consumption, which may render Kibana unavailable.

Weaknesses

CWE-770

Coverage 1

threat-intel

Multiples vulnérabilités dans les produits Elastic (22 juillet 2026)

Multiple vulnerabilities have been discovered in Elastic products, including Elasticsearch and Kibana. These vulnerabilities can lead to data integrity compromise, data confidentiality breaches, and denial-of-service att…

CERT-FR · Jul 22, 2026 High

CVE-2018-17245CVE-2026-42397CVE-2026-49092vulnerabilityssrfelastic

All articles mentioning it

Advisories and references

• discuss.elastic.co/t/kibana-9-3-7-9-4-4-security-update-esa-2026-55...