Beveiligingsadvies

CVE-2026-26940

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-19 17:14:31

Laatst bijgewerkt 2026-03-19 17:48:13

Toegewezen door elastic

CVSS-score 6.5

Status PUBLISHED

Beschrijving

Improper Validation of Specified Quantity in Input (CWE-1284) in the Timelion visualization plugin in Kibana can lead Denial of Service via Excessive Allocation (CAPEC-130). The vulnerability allows an authenticated user to send a specially crafted Timelion expression that overwrites internal series data properties with an excessively large quantity value.

← Alle CVE's bekijken Bekijk op cve.org ↗