PT-2026-44491 · Elastic · Kibana

Ismisepaul + 1 · Published 2026-05-28 · Updated 2026-06-01 · CVE-2026-33464

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description Uncontrolled Resource Consumption in Kibana can lead to a denial of service via Excessive Allocation. An authenticated user with a low-privileged role can submit a specially crafted, oversized payload to an internal Kibana API, causing the process to exhaust available resources and become unresponsive to all users until the service recovers or is restarted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BIT-ELK-2026-33464

BIT-KIBANA-2026-33464

CVE-2026-33464

Affected Products

Kibana

References · 4

• https://osv.dev/vulnerability/BIT-elk-2026-33464 · Vendor Advisory
• https://discuss.elastic.co/t/kibana-8-19-16-9-3-5-9-4-1-security-update-esa-2026-32/386548 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33464 · Security Note
• https://osv.dev/vulnerability/BIT-kibana-2026-33464 · Vendor Advisory