Beveiligingsadvies

CVE-2026-33464

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-28 19:35:31
Laatst bijgewerkt 2026-05-29 14:55:19
Toegewezen door elastic
CVSS-score 6.5
Status PUBLISHED

Beschrijving

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding a low-privileged role can submit a specially crafted, oversized payload to an internal Kibana API, causing the Kibana process to exhaust available resources and become unresponsive to all users until the service recovers or is restarted.