CVE-2026-33464
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
May 28, 2026
Vendor
unknown
Description
Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding a low-privileged role can submit a specially crafted, oversized payload to an internal Kibana API, causing the Kibana process to exhaust available resources and become unresponsive to all users until the service recovers or is restarted.