Lucene search
+L

6 matches found

Tenable Nessus
Tenable Nessus
added 2026/09/09 12:00 a.m.12 views

Kibana 8.19.x < 8.19.21 / 9.0.x < 9.4.6 / 9.5.x < 9.5.2 DoS (ESA-2026-125)

The version of Kibana installed on the remote host is 8.19.x prior to 8.19.21, or 9.0.x prior to 9.4.6, or 9.5.x prior to 9.5.2. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-125 advisory. - Improper Handling of Highly Compressed Data CWE-409 in Kibana can lead to a...

6.5CVSS5.9AI score0.00332EPSS
SaveExploits0References2
NVD
NVD
added 2026/09/01 8:17 p.m.9 views

CVE-2026-72628

Improper Handling of Highly Compressed Data CWE-409 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user holding Streams management privileges could supply specially crafted content that expands to a far larger volume of data during processing,...

6.5CVSS0.00332EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/01 7:20 p.m.39 views

CVE-2026-72628 Improper Handling of Highly Compressed Data in Kibana Leading to Denial of Service

Improper Handling of Highly Compressed Data CWE-409 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user holding Streams management privileges could supply specially crafted content that expands to a far larger volume of data during processing,...

6.5CVSS0.00332EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/01 7:20 p.m.27 views

CVE-2026-72628

Kibana (by Elastic) is affected by a Denial of Service vulnerability (CWE-409) caused by improper handling of highly compressed data. An authenticated user with Streams management privileges can supply crafted content that expands to a much larger data volume during processing, exhausting memory ...

6.5CVSS5.9AI score0.00332EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/09/01 7:20 p.m.10 views

CVE-2026-72628 Improper Handling of Highly Compressed Data in Kibana Leading to Denial of Service

Improper Handling of Highly Compressed Data CWE-409 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user holding Streams management privileges could supply specially crafted content that expands to a far larger volume of data during processing,...

6.5CVSS5.6AI score
SaveExploits0References3
EUVD
EUVD
added 2026/09/01 7:20 p.m.17 views

EUVD-2026-69564

Improper Handling of Highly Compressed Data CWE-409 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user holding Streams management privileges could supply specially crafted content that expands to a far larger volume of data during processing,...

6.5CVSS5.9AI score0.00332EPSS
SaveExploits0References1
Rows per page
Query Builder