PT-2026-44491

CVE-2026-33464

·

Published

2026-05-28

·

Updated

2026-09-04

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)
Description Uncontrolled Resource Consumption in Kibana can lead to a denial of service via Excessive Allocation. An authenticated user with a low-privileged role can submit a specially crafted, oversized payload to an internal Kibana API, causing the process to exhaust available resources and become unresponsive to all users until the service recovers or is restarted.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
BIT-ELK-2026-33464
BIT-KIBANA-2026-33464
Found an issue in the description? Have something to add? Feel free to write us 👾