PT-2026-26314

CVE-2026-26931

Published

2026-03-19

Updated

2026-07-30

Description by

CVSS 3.1

5.7

Medium

MetricsAV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Metricbeat (affected versions not specified)

Description A memory allocation issue exists within the Prometheus remote write HTTP handler in Metricbeat. This issue, categorized as excessive allocation (CAPEC-130), can lead to a denial of service (CWE-789). The problem stems from a memory allocation with an excessively large size value.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Ismisepaul

Paul

Vendors

Affected products

Weakness enumeration

CWE-789: Memory Allocation with Excessive Size Value

Related identifiers