CVE-2026-0530CWE-770

Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation

Medium · published January 13, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
24.3
In the wild
Unconfirmed
What it is

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive Allocation (CAPEC-130) via a specially crafted request. This causes the application to perform redundant processing operations that continuously consume system resources until service degradation or complete unavailability occurs.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00325 · 24.3th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-01-13T21:03Z
EPSS history
Timeline
  • 13 JAN 21:03Z
    Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation
    cvelistv5