Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-0530

Fixed in a distro release EPSS <1%CVSS 6.5

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive Allocation (CAPEC-130) via a specially crafted request. This causes the application to perform redundant processing operations that continuously consume system resources until service degradation or complete unavailability occurs.

Published 2026-01-13 · CVE record · OSV

Products: Elastic Kibana

Distro releases

ReleasePackageFixed in
Chainguardkibana-8.17-bitnami8.17.10-r11
Chainguardkibana-8.18-bitnami8.18.8-r10