PT-2026-54767 · Elastic · Kibana

Kruskall · Published 2026-07-01 · Updated 2026-07-01 · CVE-2026-49087

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Kibana (affected versions not specified)

Description An authenticated user can cause a denial of service by submitting a specially crafted bulk deletion request. This leads to excessive resource consumption, which may render the application unavailable. This issue is caused by the allocation of resources without limits or throttling.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2026-49087

Affected Products

Kibana

References · 3

• https://discuss.elastic.co/t/kibana-8-19-15-9-3-4-security-update-esa-2026-49 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-49087 · Security Note
• https://twitter.com/VulmonFeeds/status/2072416885518319935 · Twitter Post