CVE-2026-26935
Improper Input Validation in Kibana Leading to Denial of Service
概要
Improper Input Validation in Kibana Leading to Denial of Service
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Improper Input Validation (CWE-20) in the internal Content Connectors search endpoint in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153)
影響パッケージ
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"8.4.0"},{"fixed":"8.19.12"},{"introduced":"9.0.0"},{"fixed":"9.2.6"},{"introduced":"9.3.0"},{"fixed":"9.3.1"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"8.4.0"},{"fixed":"8.19.12"},{"introduced":"9.0.0"},{"fixed":"9.2.6"},{"introduced":"9.3.0"},{"fixed":"9.3.1"}]}]
参照URL
- advisory discuss.elastic.co
- web nvd.nist.gov