CVE-2026-26935
Improper Input Validation in Kibana Leading to Denial of Service
Summary
Improper Input Validation in Kibana Leading to Denial of Service
Original description
The description as published by the source.
Improper Input Validation (CWE-20) in the internal Content Connectors search endpoint in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153)
Affected packages
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"8.4.0"},{"fixed":"8.19.12"},{"introduced":"9.0.0"},{"fixed":"9.2.6"},{"introduced":"9.3.0"},{"fixed":"9.3.1"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"8.4.0"},{"fixed":"8.19.12"},{"introduced":"9.0.0"},{"fixed":"9.2.6"},{"introduced":"9.3.0"},{"fixed":"9.3.1"}]}]
References
- advisory discuss.elastic.co
- web nvd.nist.gov