CVE-2026-56150

Analyzed Analyzed - Analysis Complete

Allocation of Resources Without Limits in Fleet Server

Publication date: 2026-07-01

Last updated on: 2026-07-06

Assigner: Elastic

Description

Allocation of Resources Without Limits or Throttling (CWE-770) in Fleet Server can lead to a denial of service via Excessive Allocation (CAPEC-130). An attacker can submit a specially crafted request to an upload endpoint that causes excessive memory consumption, which may render Fleet Server unavailable.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-01

Last Modified

2026-07-06

Generated

2026-07-21

AI Q&A

2026-07-01

EPSS Evaluated

2026-07-20

NVD

CVE-2026-56150

EUVD

EUVD-2026-41077

Affected Vendors & Products

Vendor	Product	Version / Range
elastic	fleet_server	From 8.0.0 (inc) to 8.19.11 (exc)
elastic	fleet_server	From 9.0.0 (inc) to 9.2.5 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

Executive Summary

This vulnerability (CVE-2026-56150) involves improper allocation of resources without limits or throttling in Fleet Server, specifically related to memory usage.

An attacker can exploit this by sending a specially crafted request to an upload endpoint, which causes excessive memory consumption.

This excessive memory use can lead to a denial of service, making the Fleet Server unavailable.

Detection Guidance

There are no specific indicators of compromise or detection commands identified for this vulnerability. The issue involves excessive memory consumption caused by specially crafted requests to an upload endpoint, but no known detection methods or commands have been provided.

Impact Analysis

The primary impact of this vulnerability is a denial of service condition on the Fleet Server.

An attacker exploiting this flaw can cause the server to consume excessive memory, potentially rendering it unavailable and disrupting services that depend on it.

This can affect system availability and reliability, leading to operational downtime.

Compliance Impact

The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Mitigation Strategies

The primary mitigation step is to upgrade Fleet Server to a fixed version. The vulnerability is resolved in Fleet Server versions 8.19.11, 9.2.5, and 9.3.0. There are no known workarounds for users unable to upgrade.

Hi! I’m here to help you understand CVE-2026-56150. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70