CVE-2026-26936
Inefficient Regular Expression Complexity in Kibana Leading to Denial of Service
Résumé
Inefficient Regular Expression Complexity in Kibana Leading to Denial of Service
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Inefficient Regular Expression Complexity (CWE-1333) in the AI Inference Anonymization Engine in Kibana can lead Denial of Service via Regular Expression Exponential Blowup (CAPEC-492).
Paquets affectés
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"8.19.11"},{"introduced":"9.0.0"},{"fixed":"9.2.5"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"8.19.11"},{"introduced":"9.0.0"},{"fixed":"9.2.5"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- web discuss.elastic.co