CVE-2026-26933: Improper Validation of Array Index in Packetbeat Leading to Denial of Service
Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of Service via Input Data Manipulation (CAPEC-153). An attacker with the ability to send specially crafted, malformed network packets to a monitored network interface can trigger out-of-bounds read operations, resulting in application crashes or resource exhaustion. This requires the attacker to be positioned on the same network segment as the Packetbeat deployment or to control traffic routed to monitored interfaces.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-26933?
CVE-2026-26933 is classified as a denial of service vulnerability due to improper validation of array indices in Packetbeat.
How do I fix CVE-2026-26933?
To remedy CVE-2026-26933, upgrade to Packetbeat version 7.0.0-alpha2.0.20260126223743-dec1b31111ec or newer.
What types of attacks can exploit CVE-2026-26933?
CVE-2026-26933 can be exploited through input data manipulation to achieve a denial of service.
Which versions of Packetbeat are affected by CVE-2026-26933?
Packetbeat versions between 8.0.0 and 8.19.11, as well as between 9.0.0 and 9.2.5, are affected by CVE-2026-26933.
Is it safe to use Packetbeat if it is not updated for CVE-2026-26933?
No, using an outdated version of Packetbeat that is vulnerable to CVE-2026-26933 poses a risk of denial of service attacks.