CVE-2026-26937
Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
Summary
Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
Original description
The description as published by the source.
Uncontrolled Resource Consumption (CWE-400) in the Timelion component in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153)
Affected packages
Bitnami
elk
[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"8.19.11"},{"introduced":"9.0.0"},{"fixed":"9.2.5"}]}]
Bitnami
kibana
[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"8.19.11"},{"introduced":"9.0.0"},{"fixed":"9.2.5"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- web discuss.elastic.co