Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Inefficient Regular Expression Complexity (CWE-1333) in the AI Inference Anonymization Engine in Kibana can lead Denial of Service via Regular Expression Exponential Blowup (CAPEC-492).
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-26 | 1 | Disclosure1 |
| 2026-03-04 | 1 | Patch1 |
`Kibana` is affected by CVE-2026-26936, an inefficient regex DoS vulnerability. This can impact service availability. Update `Kibana` to version 9.2.5 or later. #Kibana #ElasticStack #infosec https://www.pulsepatch.io/posts/cve-2026-26936-kibana-regex-dos
Post summary
The tweet alerts that Kibana is vulnerable to a regex-based DoS (CVE-2026-26936) and recommends upgrading to version 9.2.5 or newer to mitigate the risk.
CVE-2026-26936 Inefficient Regular Expression Complexity (CWE-1333) in the AI Inference Anonymization Engine in Kibana can lead Denial of Service via Regular Expression Exponential … https://www.cve.org/CVERecord?id=CVE-2026-26936
Post summary
CVE-2026-26936 highlights an inefficient regular expression in Kibana’s AI Inference Anonymization Engine that can cause a denial of service.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | elastic | kibana | - | - | - |