Security Advisory
CVE-2026-42397
6.5
MEDIUM
Vulnerability Description
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially crafted request to affected Entity Analytics endpoints containing an oversized input value that causes excessive resource consumption, which may render Kibana unavailable.
Published Date
July 21, 2026
Official Source
NIST NVD Advisory