CVE-2026-42397

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description An authenticated user can cause a denial of service by submitting a specially crafted request to Entity Analytics endpoints. By providing an oversized input value, the attacker can trigger excessive resource consumption, potentially rendering the service unavailable. This occurs due to the allocation of resources without proper limits or throttling.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.