CVEvulnerability

CVE-2026-26931

5.7 MEDIUM Published 2026-03-19 Modified 2026-09-04 Official page ↗
Status
Analyzed
Published
2026-03-19
Last modified
2026-09-04
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.7 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-789

Description

Memory Allocation with Excessive Size Value (CWE-789) in the Prometheus remote_write HTTP handler in Metricbeat can lead Denial of Service via Excessive Allocation (CAPEC-130).

Affected configurations

• elastic metricbeat (>= 8.0.0 < 8.19.13) • elastic metricbeat (>= 9.0.0 < 9.2.5)

Related

Weakness · CWE (1)

  • CWE-789 Memory Allocation with Excessive Size Value weakness

References