Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Validation of Specified Quantity in Input (CWE-1284) in the Timelion visualization plugin in Kibana can lead Denial of Service via Excessive Allocation (CAPEC-130). The vulnerability allows an authenticated user to send a specially crafted Timelion expression that overwrites internal series data properties with an excessively large quantity value.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-19 | 1 | General1 |
| 2026-03-23 | 1 | Disclosure1 |
CVE-2026-26940 Improper Validation of Specified Quantity in Input (CWE-1284) in the Timelion visualization plugin in Kibana can lead Denial of Service via Excessive Allocation (CAPE… https://www.cve.org/CVERecord?id=CVE-2026-26940
Post summary
CVE-2026-26940 is a denial‑of‑service vulnerability in Kibana's Timelion plugin caused by improper validation that can lead to excessive memory allocation.
CVE-2026-26940 Kibana Timelion Visualization Plugin Denial of Service vi... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26940 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The tweet only references CVE‑2026‑26940 and links to a vulnerability details page without offering any exploit, patch, or technical information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | elastic | kibana | - | - | - |