CVE details
CVE-2026-72682
Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding only low, read-level Agent Builder privileges could submit a specially crafted request that causes Kibana to consume an unbounded amount of memory, terminating the process and denying service to all users of the instance.
Matched ports (2)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| textproc/kibana93 | kibana93 | 9.3.8 | possibly backported | elastic@FreeBSD.org |
| textproc/kibana94 | kibana94 | 9.4.7 | fixed by update | elastic@FreeBSD.org |