Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-26935
6.5
MEDIUMCVSS v3
Severity scale
010
Description
Improper Input Validation (CWE-20) in the internal Content Connectors search endpoint in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153)
elastic/kibana
GitHubYour window into all of your data
GitHubYour window into all of your data>= 8.4.0, < 8.19.12, >= 9.0.0, < 9.2.6, = 9.3.0NVD
elastic/kibana
Docker HubThe Kibana docker images maintained by Elastic!
Docker HubThe Kibana docker images maintained by Elastic!>= 8.4.0, < 8.19.12, >= 9.0.0, < 9.2.6, = 9.3.0NVD