Threats Tagged 'cve-2026-72628'
View all threats tagged with 'cve-2026-72628'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-72628'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-72628 is a vulnerability in Kibana involving improper handling of highly compressed data that can cause a denial of service via excessive memory allocation. An authenticated user with Streams management privileges can supply specially crafted compressed content that expands to a large volume during processing, exhausting Kibana's memory and causing the process to terminate. This results in service unavailability until Kibana is restarted. Join the discussion | GCVE Database | 09/01/2026, 21:31:47 UTC Added: 09/02/2026, 15:49:28 UTC |
0 Improper Handling of Highly Compressed Data (CWE-409) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding Streams management privileges could supply specially crafted content that expands to a far larger volume of data during processing, exhausting the memory available to Kibana. The Kibana process is terminated by the host and remains unavailable to all users until the service is restarted. Join the discussion | CVE Database V5 | 09/01/2026, 19:20:21 UTC Added: 09/01/2026, 19:22:46 UTC |
Showing 1 to 2 of 2 results