Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Uncontrolled Resource Consumption (CWE-400) in the Timelion component in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153)
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-26 | 2 | Disclosure1General1 |
| 2026-03-04 | 1 | Patch1 |
`Kibana` is vulnerable to Denial of Service (CVE-2026-26937) via uncontrolled resource consumption. Update `Kibana` to version 9.2.5 or later to mitigate this #DoS issue. #Kibana #infosec https://www.pulsepatch.io/posts/cve-2026-26937-kibana-denial-of-service
Post summary
CVE‑2026‑26937 enables a denial‑of‑service attack on Kibana via uncontrolled resource consumption; updating to Kibana 9.2.5 or later mitigates the issue.
CVE-2026-26937 Timelion Denial of Service via Uncontrolled Resource Consumption ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26937 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The post announces CVE-2026-26937, a DoS vulnerability in Timelion caused by uncontrolled resource consumption, and provides links to vulnerability details and alert subscriptions.
CVE-2026-26937 Uncontrolled Resource Consumption (CWE-400) in the Timelion component in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153) https://www.cve.org/CVERecord?id=CVE-2026-26937
Post summary
The CVE-2026-26937 disclosure details an uncontrolled resource consumption flaw in Kibana's Timelion component that can lead to a denial of service through input data manipulation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | elastic | kibana | - | - | - |