Denial of Service Vulnerability in Metricbeat Affected by Elastic

CVE-2026-0528

What is CVE-2026-0528?

A security flaw in Metricbeat allows attackers to manipulate input data, leading to a Denial of Service. Specifically, the improper validation of array indexes can be exploited via crafted payloads directed at the Graphite and Zookeeper server metricsets. Furthermore, a secondary issue in the Prometheus helper module similarly permits Denial of Service threats through malicious metric data. Organizations using affected versions are strongly encouraged to apply security updates to mitigate these vulnerabilities.

References