NetSight
medium4.9

CVE-2026-26936

Inefficient Regular Expression Complexity (CWE-1333) in the AI Inference Anonymization Engine in Kibana can lead Denial of Service via Regular Expression Expon…

Impact

Inefficient Regular Expression Complexity (CWE-1333) in the AI Inference Anonymization Engine in Kibana can lead Denial of Service via Regular Expression Exponential Blowup (CAPEC-492).

Affected products

VendorProductAffected versions
ElasticKibana
from 8.0.0 before 8.19.11
from 9.0.0 before 9.2.5

Weakness classification

References