{"action":"Upgrade github.com/elastic/beats/v7 to 7.0.0-alpha2.0.20260126223743-dec1b31111ec or later.","affected":[{"fixed":"7.0.0-alpha2.0.20260126223743-dec1b31111ec","introduced":"0"}],"component":"github.com/elastic/beats/v7","cve_ids":["CVE-2026-26933"],"ecosystem":"Go","epss":0.00251,"exploited":false,"fixed_versions":["7.0.0-alpha2.0.20260126223743-dec1b31111ec"],"ghsa_id":"GHSA-27qj-9gvp-8rh9","id":"tcs_01M5KERQKMTG0DBP2EEBW6Z80H","modified_at":"2026-09-10T03:50:36.274896332Z","published_at":"2026-03-19T18:31:19Z","references":["https://osv.dev/vulnerability/GHSA-27qj-9gvp-8rh9","https://nvd.nist.gov/vuln/detail/CVE-2026-26933","https://github.com/elastic/beats/commit/941098459db6556b837194f40c076b08d51137cb","https://github.com/elastic/beats/commit/dec1b31111ec3500b82db21ba67dde5c914ee94d","https://discuss.elastic.co/t/packetbeat-8-19-11-9-2-5-security-update-esa-2026-11/385533","https://github.com/elastic/beats"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"GHSA-27qj-9gvp-8rh9","url":"https://osv.dev/vulnerability/GHSA-27qj-9gvp-8rh9"}],"summary":"Packetbeat does not properly validate an array index in multiple protocol parser components"}