Elastic Metricbeat

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-269318.0.0 – 8.19.12Memory Allocation with Excessive Size Value in Metricbeat Leading to Denial of ServiceMEDIUM 5.70.2 %
CVE-2026-05287.0.0 – 7.17.29 ; 8.0.0 – 8.19.9 ; 9.0.0 – 9.1.9 ; …Improper Input Validation in Metricbeat Leading to Denial of ServiceHIGH 7.50.4 %