CVE-2026-56151: Improper Input Validation in Kibana Leading to Denial of Service

Q: What is the severity of CVE-2026-56151?

The severity of CVE-2026-56151 is medium with a score of 6.5.

Q: How do I fix CVE-2026-56151?

To fix CVE-2026-56151, update to the latest version of Elastic Kibana that includes the security patch for this vulnerability.

Q: What impact does CVE-2026-56151 have on Kibana?

CVE-2026-56151 can lead to a denial of service by allowing an authenticated user to exploit improper input validation.

Q: Who is affected by CVE-2026-56151?

CVE-2026-56151 affects users of Elastic Kibana versions that are vulnerable to this specific denial of service issue.

Q: Is CVE-2026-56151 related to input validation?

Yes, CVE-2026-56151 is related to improper input validation as defined by CWE-20.

Published Jul 1, 2026

Updated

Improper Input Validation (CWE-20) in Kibana can lead to a denial of service via Input Data Manipulation (CAPEC-153). An authenticated user can submit a specially crafted Fleet policy input that is not correctly validated, which can render Fleet agent, server, and policy management functionality unavailable.

Affected Software

4 affected components

Elastic Kibana

Elastic Kibana>=8.0.0<8.19.17

Elastic Kibana>=9.0.0<9.3.6

Elastic Kibana>=9.4.0<9.4.3

Event History

Jul 1, 2026

CVE Published

via MITRE·04:29 PM

Data Sourced

via MITRE·04:29 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-56151?

The severity of CVE-2026-56151 is medium with a score of 6.5.

How do I fix CVE-2026-56151?

To fix CVE-2026-56151, update to the latest version of Elastic Kibana that includes the security patch for this vulnerability.

What impact does CVE-2026-56151 have on Kibana?