CVE-2026-33459CWE-400

Uncontrolled Resource Consumption in Kibana Leading to Denial of Service

Medium · published April 8, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
39.8
In the wild
Unconfirmed
What it is

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with access to the automatic import feature can submit specially crafted requests with excessively large input values. When multiple such requests are sent concurrently, the backend services become unstable, resulting in service disruption and deployment unavailability for all users.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00472 · 39.8th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2026-04-08T16:46Z
EPSS history
Timeline
  • 08 APR 16:46Z
    Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
    cvelistv5