Essential Guide: CVE-2026-0543 - Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation

Essential Guide: CVE-2026-0543 - Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation

CVE ID : CVE-2026-0543 Published : Jan. 13, 2026, 9:10 p.m. | 12 minutes ago Description : Improper Input Validation (CWE-20) in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation (CAPEC-130) through a specially crafted email address parameter. This requires an attacker to have authenticated access with view-level privileges sufficient to execute connector actions. The application attempts to process specially crafted email format, resulting in complete service unavailability for all users until manual restart is performed. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
Jan. 13, 2026
Affected Product: Kibana
CWE: CWE-20

Source: Telegram CVE Monitor