Vulnerability · Published Nov 3, 2026 · Assigned by elastic
CVE-2026-115297NULL Pointer Dereference in Packetbeat Leading to Denial of Service
Medium 6.5
In plain English
A medium-severity null pointer dereference in Packetbeat from Elastic. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).
Official description
NULL Pointer Dereference (CWE-476) in the AMQP protocol parser in Packetbeat can lead to denial of service via specially crafted network traffic. An unauthenticated attacker who can send traffic on a network segment that Packetbeat monitors for AMQP can cause a Go runtime panic that terminates the Packetbeat process. A single crafted packet is sufficient. No AMQP authentication is necessary. While Packetbeat is not running, it does not collect network telemetry.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Elastic | Packetbeat | 8.0.0 – through 8.19.239.0.0 – through 9.4.89.5.0 – through 9.5.5 |
Weakness: CWE-476 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H