Memory Allocation with Excessive Size Value in Metricbeat Leading to Denial of Service
cve-program · CVE-2026-26931
PublishedMemory Allocation with Excessive Size Value (CWE-789) in the Prometheus remote_write HTTP handler in Metricbeat can lead Denial of Service via Excessive Allocation (CAPEC-130).
Read the publisher's advisoryeuvd · EUVD-2026-13139
PublishedMemory Allocation with Excessive Size Value (CWE-789) in the Prometheus remote_write HTTP handler in Metricbeat can lead Denial of Service via Excessive Allocation (CAPEC-130).
Read the publisher's advisorynvd · CVE-2026-26931
PublishedMemory Allocation with Excessive Size Value (CWE-789) in the Prometheus remote_write HTTP handler in Metricbeat can lead Denial of Service via Excessive Allocation (CAPEC-130).
Read the publisher's advisoryosv · GHSA-5vrw-qjxw-89r5
PublishedMemory Allocation with Excessive Size Value (CWE-789) in the Prometheus remote_write HTTP handler in Metricbeat can lead Denial of Service via Excessive Allocation (CAPEC-130).
Read the publisher's advisoryosv · GO-2026-4790
PublishedMetricbeat Allocates Memory with Excessive Size Value Leading to Denial of Service in github.com/elastic/beats
Read the publisher's advisoryAffected versions, risk and source history
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-26931 · CVE overview and exploitation status
cve-program · CVE-2026-26931
euvd · EUVD-2026-13139
nvd · CVE-2026-26931
osv · GHSA-5vrw-qjxw-89r5
- https://nvd.nist.gov/vuln/detail/CVE-2026-26931
- https://github.com/elastic/beats/commit/de072c4e371eafeb2a42d65b9ad513f666e4ffd7
- https://discuss.elastic.co/t/metricbeat-8-19-13-9-2-5-security-update-esa-2026-09/385532
- https://github.com/elastic/beats
osv · GO-2026-4790
Related changes
Linked by CVE identifierNo related changes are available here.