CVE-2026-49096

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description An uncaught exception in Kibana Cases allows for a denial of service through input data manipulation. This occurs because malformed link syntax stored in a case comment is not rejected or sanitized during the formatting process for display. An authenticated user with permissions to comment on a case can store a malicious comment, rendering the case inaccessible to all users who attempt to open it until the comment is removed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.