Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with access to the automatic import feature can submit specially crafted requests with excessively large input values. When multiple such requests are sent concurrently, the backend services become unstable, resulting in service disruption and deployment unavailability for all users.
References
| Link | Resource |
|---|---|
| https://discuss.elastic.co/t/kibana-8-19-14-9-2-8-9-3-3-security-update-esa-2026-26/385814 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
13 Apr 2026, 18:21
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:elastic:kibana:*:*:*:*:*:*:*:* | |
| First Time |
Elastic
Elastic kibana |
|
| References | () https://discuss.elastic.co/t/kibana-8-19-14-9-2-8-9-3-3-security-update-esa-2026-26/385814 - Vendor Advisory |
08 Apr 2026, 18:26
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-08 18:26
Updated : 2026-04-13 18:21
NVD link : CVE-2026-33459
Mitre link : CVE-2026-33459
CVE.ORG link : CVE-2026-33459
JSON object : View
Products Affected
elastic
- kibana
CWE
CWE-400
Uncontrolled Resource Consumption