CVE-2026-26935
Improper Input Validation in Kibana Leading to Denial of Service
Résumé
Improper Input Validation in Kibana Leading to Denial of Service
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper Input Validation (CWE-20) in the internal Content Connectors search endpoint in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153)
Paquets affectés
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"8.4.0"},{"fixed":"8.19.12"},{"introduced":"9.0.0"},{"fixed":"9.2.6"},{"introduced":"9.3.0"},{"fixed":"9.3.1"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"8.4.0"},{"fixed":"8.19.12"},{"introduced":"9.0.0"},{"fixed":"9.2.6"},{"introduced":"9.3.0"},{"fixed":"9.3.1"}]}]
Références
- advisory discuss.elastic.co
- web nvd.nist.gov