Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-26937

Uncontrolled Resource Consumption in Kibana Leading to Denial of Service

Description

Uncontrolled Resource Consumption (CWE-400) in the Timelion component in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Elastic Kibana

Default version status: unaffected

  • 9.0.0 to ≤ 9.2.4affected
  • 8.0.0 to ≤ 8.19.10affected

References