Denial of Service Vulnerability in Kibana by Elastic

CVE-2026-63260

What is CVE-2026-63260?

An unmanaged resource consumption issue in Kibana allows an authenticated attacker with limited access to exploit the system by sending large and malformed request payloads. This can lead to significant denial of service, as the excessive memory allocation required to handle the oversized requests can deplete the available heap memory, resulting in crashes and unavailability of the Kibana service for all users.

References