VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 26, 2026· Updated Feb 26, 2026

Improper Validation of Array Index in Packetbeat Leading to Denial of Service

CVE-2026-26932

Description

Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can lead Denial of Service via Input Data Manipulation (CAPEC-153). An attacker can send a specially crafted packet causing a Go runtime panic that terminates the Packetbeat process. This vulnerability requires the pgsql protocol to be explicitly enabled and configured to monitor traffic on the targeted port.

Affected products

1
  • Elastic/Packetbeatv5
    Range: 9.0.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.