GCVE-110-NCSC-2026-78

Advisory PublishedCVSS 6.5/10

Vulnetix · Advisory published March 5, 2026

An authenticated user with view-only privileges can exploit improper input validation in Kibana to cause Denial of Service by sending malformed payloads that result in excessive resource consumption and application crashes.

Download JSON Open in Console

Weaknesses (CWE)

CWE-1333Inefficient Regular Expression ComplexityCWE-400Uncontrolled Resource ConsumptionCWE-1284Improper Validation of Specified Quantity in InputCWE-20Improper Input ValidationCWE-1336Improper Neutralization of Special Elements Used in a Template Engine

Risk Scores

CVSS 3.1

6.5/10

Medium · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions	Platforms
Elastic	vers:unknown/*	—	—
Open Source	vers:unknown/*	—	—

Aliases

CVE-2026-26934 CVE-2026-26935 CVE-2026-26936 CVE-2026-26937 CVE-2026-26938

References

advisory

Browse GCVE Records

73,873 records in the GCVE database · Updated July 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON