CVE-2026-26934

Improper Validation of Specified Quantity in Input CWE-1284 in Kibana can allow an authenticated attacker with view-only privileges to cause a Denial of Service via Input Data Manipulation CAPEC-153. An attacker can send a specially crafted, malformed payload causing excessive resource consumptio...

The vulnerability of the Kibana data visualization service, related to deficiencies in access control, allows a perpetrator to compromise the confidentiality of the protected information.

The vulnerability of the Kibana data visualization service is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality of the protected information...