PT-2026-22162 · Elastic · Packetbeat

Giant_Anteater · Publicado 2026-02-26 · Atualizado 2026-03-13 · CVE-2026-26932

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Packetbeat (affected versions not specified)

Description A flaw exists in the PostgreSQL protocol parser within Packetbeat that allows for Denial of Service through manipulation of input data. Specifically, improper validation of an array index can cause a Go runtime panic, leading to the termination of the Packetbeat process. This requires the pgsql protocol to be explicitly enabled and configured to monitor traffic on the targeted port.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Validation of Array Index

Enumeração de Fraquezas

CWE-129

Identificadores relacionados

CVE-2026-26932

Produtos afetados

Packetbeat

Referências · 6

• https://twitter.com/CVEnew/status/2027099249062854974 · Publicação no Twitter
• https://discuss.elastic.co/t/packetbeat-8-19-11-9-2-5-security-update-esa-2026-10/385247 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2026-26932 · Aviso do Fabricante
• https://twitter.com/dailycve/status/2032273415441195185 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-26932 · Nota de Segurança
• https://t.me/cveNotify/155351 · Publicação no Telegram