OtherMedium
CVE-2026-63261: Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Al…
- Occurred
- Jul 21, 2026
- Published
- Jul 21, 2026
- Source
- NVD CVE
Summary
Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user can send a specially crafted request to a Kibana machine learning feature, causing the server to exhaust available memory and become unavailable to all users.
Tags
- CVE
- CVE-2026-63261
- cvss:MEDIUM
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: CVE describes a denial of service vulnerability in Kibana, which is a software security flaw rather than an AI-specific incident.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8