Product · Elastic

Metricbeat

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.7

CVE-2026-26931

Memory Allocation with Excessive Size Value in Metricbeat Leading to Denial of Service

Memory Allocation with Excessive Size Value (CWE-789) in the Prometheus remote_write HTTP handler in Metricbeat can lead Denial of Service via Excessive Allocation (CAPEC-130).

Elastic Metricbeat github.com/elastic/beats github.com/elastic/beats/v7 Go

Mar 19, 2026
Medium 6.5

CVE-2026-0528

Improper Input Validation in Metricbeat Leading to Denial of Service

Improper Validation of Array Index (CWE-129) exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation (CAPEC-153) via specially crafted, malformed payloads sent to the Graphite server metricset or Zookeeper serve…

Elastic Metricbeat github.com/elastic/beats github.com/elastic/beats/v7 Go

Jan 13, 2026