CVE-2026-0543 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Improper Input Validation (CWE-20) in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation (CAPEC-130) through a specially crafted em…
Medium CVSS: 6.5

CVE-2026-0543

Improper Input Validation (CWE-20) in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation (CAPEC-130) through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector actions. The application attempts to process specially crafted email format, resulting in complete service unavailability for all users until manual restart is performed.
Vendor
Elastic
Product
Kibana
CWE
CWE-20
Yayın Tarihi
2026-01-13 21:15:51
Güncelleme
2026-01-22 20:04:20
Source Identifier
security@elastic.co
KEV Date Added
-

Kategoriler

Referanslar