Memory Allocation with Excessive Size Value in Metricbeat Leading to Denial of Service

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-26931 · CVE overview and exploitation status

EUVD-2026-13139

GHSA-5vrw-qjxw-89r5

GO-2026-4790

cve-program · CVE-2026-26931

• https://discuss.elastic.co/t/metricbeat-8-19-13-9-2-5-security-update-esa-2026-09/385532

euvd · EUVD-2026-13139

• https://discuss.elastic.co/t/metricbeat-8-19-13-9-2-5-security-update-esa-2026-09/385532

nvd · CVE-2026-26931

• https://discuss.elastic.co/t/metricbeat-8-19-13-9-2-5-security-update-esa-2026-09/385532

osv · GHSA-5vrw-qjxw-89r5

• https://nvd.nist.gov/vuln/detail/CVE-2026-26931
• https://github.com/elastic/beats/commit/de072c4e371eafeb2a42d65b9ad513f666e4ffd7
• https://discuss.elastic.co/t/metricbeat-8-19-13-9-2-5-security-update-esa-2026-09/385532
• https://github.com/elastic/beats

osv · GO-2026-4790

• https://github.com/advisories/GHSA-5vrw-qjxw-89r5
• https://github.com/elastic/beats/commit/de072c4e371eafeb2a42d65b9ad513f666e4ffd7
• https://discuss.elastic.co/t/metricbeat-8-19-13-9-2-5-security-update-esa-2026-09/385532

No related changes are available here.