CVE-2026-26931

Memory Allocation with Excessive Size Value in Metricbeat Leading to Denial of Service PUBLISHED

Description (CNA)

Memory Allocation with Excessive Size Value (CWE-789) in the Prometheus remote_write HTTP handler in Metricbeat can lead Denial of Service via Excessive Allocation (CAPEC-130).

Affected (CNA)

Vendor / product	Versions
Elastic / Metricbeat	affected 8.0.0 through 8.19.12

CWE

CWE-789

References

https://discuss.elastic.co/t/metricbeat-8-19-13-9-2-5-security-update-esa-2026-09/385532

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.