CVE-2026-26935

CVE-2026-26935 affects Kibana’s internal Content Connectors search endpoint. The root cause is improper input validation (CWE-20), which can allow input data manipulation leading to Denial of Service (CAPEC-153). Public references cite an Elastic security update addressing this in Kibana, and NCS...

Kibana 8.19.12, 9.2.6, 9.3.1 Security Update (ESA-2026-13)

Improper Input Validation in Kibana Leading to Denial of Service Improper Input Validation CWE-20 in the internal Content Connectors search endpoint in Kibana can lead Denial of Service via Input Data Manipulation CAPEC-153 Affected Versions: 8.x: All versions from 8.4.0 up to and including 8.19....