PT-2026-62076 · Elastic · Kibana

CVE-2026-42397 · Publicado 2026-07-21 · Atualizado 2026-07-21

NVD

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially crafted request to affected Entity Analytics endpoints containing an oversized input value that causes excessive resource consumption, which may render Kibana unavailable.

Correção

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

CVE-2026-42397

Produtos afetados

Kibana

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-42397 · Nota de Segurança
• https://discuss.elastic.co/t/kibana-9-3-7-9-4-4-security-update-esa-2026-55/388554/1 · Nota