CVE-2026-26933Disclosure(elasticsearch / packetbeat)

MEDIUMCVSS 5.7 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch elasticsearch packetbeat systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of Service via Input Data Manipulation (CAPEC-153). An attacker with the ability to send specially crafted, malformed network packets to a monitored network interface can trigger out-of-bounds read operations, resulting in application crashes or resource exhaustion. This requires the attacker to be positioned on the same network segment as the Packetbeat deployment or to control traffic routed to monitored interfaces.

elasticsearch CVEs Back to dashboard

4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://discuss.elastic.co/t/packetbeat-8-19-11-9-2-5-security-update-esa-2026-11/385533

Weakness type (CWE)

CWE-129

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

packetbeat

Threat summary

Public PoC and exploit tooling are both present
Patch or workaround signal is available
3 mentions across 3 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 1 signal
PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
Disclosure: 2 classified signals
Peaked 2d ago at 1 mentions (2026-03-19); latest day: 1
3 total mentions across 3 days

Affected systems

Vendors

elasticsearch

Products

packetbeat

Deep dive

Activity timeline3 mentions / 3d

Signal classification2 categories

Disclosure

266.7%

PoC

133.3%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-19	1	Disclosure1
2026-03-20	1	PoC1
2026-03-23	1	Disclosure1

Full discourse3 posts

CVE@CVEnew200d
Disclosure
CVE-2026-26933 Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of Service via Input Data Manipulation (CAPEC-153). … https://www.cve.org/CVERecord?id=CVE-2026-26933
Post summary
The notice announces CVE-2026-26933 as an improper validation of array index vulnerability in Packetbeat protocol parsers that could lead to denial of service via input data manipulation, with a link to the CVE record for details.
0000077
56.8K followersView on X
Hephaestvs@Vulcanux_202d
PoC
csirt_it: ‼#Elastic: un Proof of Concept (#PoC) per lo sfruttamento delle vulnerabilità CVE-2026-26933 risulta disponibile in rete Rischio: 🟠 Tipologia: 🔸Denial Of Service ⚠Ove non provveduto, si raccomanda l'applicazione delle mitigazioni disponi… https://t.co/fLZ7tJP5eF
Post summary
A PoC for the Elastic CVE-2026-26933 Denial of Service vulnerability is publicly available, with mitigation recommendations posted.
00000103
608 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds203d
Disclosure
CVE-2026-26933 Packetbeat Denial of Service via Improper Array Index Validation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26933
Post summary
The post signals a new CVE (CVE-2026-26933) affecting Packetbeat, highlighting a denial‑of‑service issue caused by improper array index validation, but provides no evidence of exploits, PoCs, or mitigations.
0000040
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	elasticsearch	packetbeat	-	-	-

Explore more

Back to dashboard elasticsearch CVEs packetbeat vulnerabilities