CVE-2026-80788

A flaw was found in the Linux kernel's nvmet-tcp component. A remote attacker can send a specially crafted command with an oversized Scatter-Gather List SGL allocation. This can lead to an excessive memory allocation, triggering a kernel warning. On systems configured to panic on warnings, this...

Kibana 8.x < 8.19.17 / 9.0.x < 9.3.0 DoS (ESA-2026-31)

The version of Kibana installed on the remote host is 8.x prior to 8.19.17, or 9.0.x prior to 9.3.0. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-31 advisory. - Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service vi...

Kibana 8.x < 8.19.19 / 9.0.x < 9.3.5 DoS (ESA-2026-48)

The version of Kibana installed on the remote host is 8.x prior to 8.19.19, or 9.0.x prior to 9.3.5. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-48 advisory. - Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service vi...

BIT-ELASTICSEARCH-2026-56143 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...

SUSE CVE-2026-46603

VP8L decoding in golang.org/x/image/vp8l can allocate an excessive amount of memory when processing a crafted VP8L image containing many unused Huffman tree groups. This allows a remote attacker to cause a denial of service via memory exhaustion...

Elastic Beats filebeat 8.0.x < 8.19.18 / 9.0.x < 9.3.1 DoS (ESA-2026-165)

The version of Elastic Beats filebeat installed on the remote host is 8.0.x prior to 8.19.18, or 9.0.x prior to 9.3.1. It is, therefore, affected by a denial of service vulnerability. - Allocation of Resources Without Limits or Throttling CWE-770 in Filebeat can lead to a denial of service via...

CVE-2026-78594

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

CVE-2026-78588 Allocation of Resources Without Limits or Throttling in Filebeat Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Filebeat can lead to a denial of service via Excessive Allocation CAPEC-130. An attacker able to reach the Filebeat HTTP ingestion endpoint could send specially crafted compressed requests that exhaust the memory resources of the...

EUVD-2026-70064

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user with low-level privileges could submit a specially crafted request that causes Kibana to consume an unbounded amount of memory, renderin...

CVE-2026-78586 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user with low-level privileges could submit a specially crafted request that causes Kibana to consume an unbounded amount of memory, renderin...

CVE-2026-78594 Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

CVE-2026-78594

Elastic APM Server is affected by an Improper Handling of Highly Compressed Data (CWE-409) vulnerability that causes a persistent denial of service . An authenticated user with write access to source map content can store specially crafted, highly compressed data that exhausts APM Server memory u...

Filebeat 8.19.18, 9.3.1 Security Update (ESA-2026-165)

Allocation of Resources Without Limits or Throttling CWE-770 in Filebeat can lead to a denial of service via Excessive Allocation CAPEC-130. An attacker able to reach the Filebeat HTTP ingestion endpoint could send specially crafted compressed requests that exhaust the memory resources of the...

CVE-2026-72652

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user can submit a specially crafted request that causes excessive resource consumption, which may render Kibana unavailable...

AZL-98448 CVE-2026-56143 affecting package rubygem-elasticsearch 8.9.0-1

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...

CVE-2026-56143

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...

CVE-2026-33465

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user with low-level permissions could submit a specially crafted request that causes excessive resource consumption, which may render Kibana...

CVE-2026-72628 Improper Handling of Highly Compressed Data in Kibana Leading to Denial of Service

Improper Handling of Highly Compressed Data CWE-409 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user holding Streams management privileges could supply specially crafted content that expands to a far larger volume of data during processing,...

CVE-2026-72628

Kibana (by Elastic) is affected by a Denial of Service vulnerability (CWE-409) caused by improper handling of highly compressed data. An authenticated user with Streams management privileges can supply crafted content that expands to a much larger data volume during processing, exhausting memory ...

EUVD-2026-69564

Improper Handling of Highly Compressed Data CWE-409 in Kibana can lead to a denial of service via Excessive Allocation CAPEC-130. An authenticated user holding Streams management privileges could supply specially crafted content that expands to a far larger volume of data during processing,...