Elastic Metricbeat vulnerabilities

2 vulnerabilities

Known vulnerabilities in Elastic Metricbeat, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.7CVE-2026-26931chainguardagentbeat+97
EPSS score
0.31%
Memory Allocation with Excessive Size Value (CWE-789) in the Prometheus remote_write HTTP handler in Metricbeat can lead Denial of Service via Excessive Allocation (CAPEC-130).7.5CVE-2026-0528chainguardagentbeat+104
EPSS score
0.43%
Improper Validation of Array Index (CWE-129) exists in Metricbeat can allow an attacker to cause a Denial of Service through Input Data Manipulation (CAPEC-153) via specially crafted, malformed payloads sent to the Graphite server metricset or Zookeeper server metricset. Additionally, Improper Input Validation (CWE-20) exists in the Prometheus helper module that can allow an attacker to cause a Denial of Service through Input Data Manipulation (CAPEC-153) via specially crafted, malformed metric data.