Denial of Service Vulnerability in Kibana by Elastic

CVE-2026-78586

What is CVE-2026-78586?

A vulnerability in Kibana allows an authenticated user with low-level privileges to submit a specially crafted request that results in excessive memory allocation. This behavior can lead to a denial of service, as Kibana may consume an unbounded amount of memory, making it inaccessible to legitimate users. Organizations using Kibana should take immediate action to mitigate this risk and ensure their systems are secure.

References