Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated attacker with low-privilege access can trigger a denial of service condition in Kibana by sending a specially crafted, oversized request payload. Processing this user-supplied input requires resource-intensive memory allocation that can exhaust the available heap memory in the Kibana process, causing it to crash and become unavailable to all users.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-07-21 | 2 | Disclosure2 |
| 2026-07-22 | 1 | Disclosure1 |
CVE-2026-63260 Denial of Service via Uncontrolled Resource Consumption in Kibana https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-63260
Post summary
CVE-2026-63260 is a denial‑of‑service vulnerability in Kibana caused by uncontrolled resource consumption. The provided text announces the issue but does not mention PoCs, active exploitation, mitigation, or debunking.
🚨*CVE* CVE-2026-63260 Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated attacker with low-privilege… https://www.cve.org/CVERecord?id=CVE-2026-63260 ----- Traducción: CVE-2026-63260 Con… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑63260, an uncontrolled resource consumption flaw in Kibana that can lead to denial of service, but it gives no evidence of PoC, exploitation, or mitigation.
CVE-2026-63260 Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated attacker with low-privilege… https://www.cve.org/CVERecord?id=CVE-2026-63260
Post summary
The excerpt announces a Denial of Service vulnerability (CVE‑2026‑63260) in Kibana, offering technical details but no PoC, exploit, active exploitation evidence, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | elastic | kibana | - | - | - |