Uncontrolled Resource Consumption (CWE-400) in the Timelion component in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153)

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Feb 26, 2026 · NIST NVD

   Detected

   Uncontrolled Resource Consumption (CWE-400) in the Timelion component in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153)

2. Jun 17, 2026 · NIST NVD

   Updated

   Uncontrolled Resource Consumption (CWE-400) in the Timelion component in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153)

Affected

• cpe elastic/kibanaversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-26937

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-26937

  Uncontrolled Resource Consumption (CWE-400) in the Timelion component in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153)

  nvd.nist.gov

References

• Vendor Advisory · discuss.elastic.co