CVE-2026-33459
Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with access to the automatic import feature can submit specially crafted requests with excessively large input values. When multiple such requests are sent concurrently, the backend services become unstable, resulting in service disruption and deployment unavailability for all users.
- Affected products
- Kibana
- Elastic Kibana
- < 8.19.14, 9.2.8, 9.3.3
- CVSS 3.1
- 6.5 MEDIUM
- EPSS
- 0.2% (15th percentile)
- Weakness
- CWE-400
- NVD status
- Analyzed
- Published
- 2026-04-08
- Attack patterns
- CAPEC-130
CVE-2026-33459 at NVD
No indexed exploits for CVE-2026-33459 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2026-33459 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.