CVE-2026-49096

Received Received - Intake

Uncaught Exception in Kibana Cases Leads to DoS

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: Elastic

Description

Uncaught Exception (CWE-248) in Kibana Cases can lead to denial of service via Input Data Manipulation (CAPEC-153). Malformed link syntax stored in a case comment was not rejected or sanitized when the comment was later formatted for display, and the resulting unhandled error prevented the affected case from being displayed. An authenticated user holding privileges to comment on a case could store such a comment, after which that case became inaccessible to every user who opened it until the stored comment was removed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-13

Last Modified

2026-08-13

Generated

2026-08-14

AI Q&A

2026-08-14

EPSS Evaluated

N/A

NVD

CVE-2026-49096

EUVD

EUVD-2026-58223

Affected Vendors & Products

Vendor	Product	Version / Range
elastic	kibana	*
elastic	kibana	From 8.0.0 (inc) to 8.19.19 (inc)
elastic	kibana	From 9.0.0 (inc) to 9.3.4 (inc)
elastic	kibana	From 9.4.0 (inc) to 9.4.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-248	An exception is thrown from a function, but it is not caught.

Attack-Flow Graph

Executive Summary

CVE-2026-49096 is an Uncaught Exception vulnerability in Kibana's Cases feature. It occurs when malformed link syntax in a case comment is not sanitized, causing an unhandled error that makes the affected case inaccessible to all users until the problematic comment is removed.

Detection Guidance

Check Kibana version using curl -XGET 'http://localhost:5601/api/console/proxy?path=%2Fapi%2Fstatus&method=GET' | grep versionNumber. Affected versions are 8.0.0-8.19.19, 9.0.0-9.3.4, and 9.4.0-9.4.1.

Impact Analysis

An authenticated user with comment privileges could exploit this to store a malformed comment, causing denial of service by making a case permanently inaccessible. This disrupts case management and collaboration for all users.

Compliance Impact

This vulnerability could impact compliance by disrupting access to critical case data, potentially violating data availability requirements in GDPR or HIPAA. Unavailable case records may lead to non-compliance with retention or accessibility mandates.

Mitigation Strategies

Upgrade Kibana to versions 8.19.20, 9.3.5, or 9.4.2 immediately. If upgrading is not possible, restrict user access to the Cases feature to prevent exploitation.

Hi! I’m here to help you understand CVE-2026-49096. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70