Security Advisory

CVE-2026-33464

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-28 19:35:31

Last updated 2026-05-29 14:55:19

Assigner elastic

CVSS score 6.5

State PUBLISHED

Description

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding a low-privileged role can submit a specially crafted, oversized payload to an internal Kibana API, causing the Kibana process to exhaust available resources and become unresponsive to all users until the service recovers or is restarted.

← Browse all CVEs View on cve.org ↗