{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/elastic/beats","cve_ids":["CVE-2026-26933"],"ecosystem":"Go","epss":0.00251,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-27qj-9gvp-8rh9","id":"tcs_01M5KGG31MSZNZYZJT8M0APD0T","modified_at":"2026-05-13T03:44:32.397322419Z","published_at":"2026-04-07T14:58:41Z","references":["https://osv.dev/vulnerability/GO-2026-4789","https://github.com/advisories/GHSA-27qj-9gvp-8rh9","https://github.com/elastic/beats/commit/941098459db6556b837194f40c076b08d51137cb","https://github.com/elastic/beats/commit/dec1b31111ec3500b82db21ba67dde5c914ee94d","https://discuss.elastic.co/t/packetbeat-8-19-11-9-2-5-security-update-esa-2026-11/385533"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"GO-2026-4789","url":"https://osv.dev/vulnerability/GO-2026-4789"},{"source":"nvd","source_id":"CVE-2026-26933","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-26933"}],"summary":"Packetbeat does not properly validate an array index in multiple protocol parser components in github.com/elastic/beats"}