PT-2026-26323 · Elastic+1 · Packetbeat+1

Ismisepaul + 1 · Published 2026-03-19 · Updated 2026-04-20 · CVE-2026-26933

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Packetbeat (affected versions not specified)

Description An improper validation of array index can lead to a denial of service through input data manipulation. An attacker positioned on the same network segment as the Packetbeat deployment, or controlling traffic routed to monitored interfaces, can send specially crafted, malformed network packets to a monitored network interface. This can trigger out-of-bounds read operations, resulting in application crashes or resource exhaustion.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Validation of Array Index

Weakness Enumeration

CWE-129

Related Identifiers

BDU:2026-07329

CVE-2026-26933

GHSA-27QJ-9GVP-8RH9

GO-2026-4789

Affected Products

Packetbeat

Red Os

References · 15

• https://osv.dev/vulnerability/GHSA-27qj-9gvp-8rh9 · Vendor Advisory
• https://discuss.elastic.co/t/packetbeat-8-19-11-9-2-5-security-update-esa-2026-11/385533 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-26933 · Security Note
• https://osv.dev/vulnerability/GO-2026-4789 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07329 · Security Note
• https://github.com/elastic/beats/commit/941098459db6556b837194f40c076b08d51137cb · Note
• https://github.com/elastic/beats/commit/dec1b31111ec3500b82db21ba67dde5c914ee94d · Note
• https://github.com/elastic/beats · Note
• https://twitter.com/CVEnew/status/2036024194450984996 · Twitter Post
• https://redos.red-soft.ru/search/?iblock_id=&q=CVE-2026-26933 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-beats-cve-2026-26933-7.3 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti-red-os-8-0/uyazvimost-beats-cve-2026-26933-8.0 · Note
• https://github.com/advisories/GHSA-27qj-9gvp-8rh9 · Note
• https://twitter.com/VulmonFeeds/status/2034739178693448018 · Twitter Post
• https://reddit.com/r/VulnMatter/comments/1ryvfc9/resumen_diario_de_vulnerabilidades_20032026 · Reddit Post