Medium · 6.5 CVE-2026-94400 EUVD-2026-87799GHSA-95p2-xgxw-hm57

Uncontrolled Resource Consumption in Kibana Leading to denial of service

Published Sep 26, 2026 · Updated Sep 26, 2026 · Assigned by elastic

Description

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead denial of service via Excessive Allocation (CAPEC-130)

Vendor	Product	Affected	Fixed
Elastic	Kibana	8.0.0 – ≤ 8.19.21, 9.0.0 – ≤ 9.4.6, 9.5.0 – ≤ 9.5.2	—

CNA	v3.1	6.5
EUVD	v3.1	6.5