Elastic vulnerabilities

Products

• Kibana 209
• Elasticsearch 97
• Cloud Enterprise 16
• Logstash 16
• Cloud Enterprise 13
• X-pack 9
• Apm Server 8
• Packetbeat 8
• Fleet Server 7
• Agent 6
• Cloud On Kubernetes 6
• X-pack Security 6
• Endpoint Security 6
• Agent 5
• Endpoint 5
• Enterprise Search 5
• Apm Server 4
• Eck Operator 4
• Endpoint Security 4
• Fleet Server 4
• Apm Agent 3
• Beats 3
• Cloud Enterprise (ece) 3
• Enterprise Search 3
• Filebeat 3
• X-pack Security 3
• Agent And Elastic Defend 2
• App Search 2
• App Search 2
• Beats 2
• Cloud On Kubernetes 2
• Defend 2
• Endpoint Security 2
• Elasticsearch X-pack 2
• Elasticsearch X-pack Machine Learning 2
• Endgame 2
• Kibana X-pack 2
• Logstash X-pack 2
• Metricbeat 2
• Winlogbeat 2

Newest

• elastic docker images Improper Certificate Validation in Elastic Docker Images Leading to Interception of TLS Connections CVE-2026-115714 7.4 HighNovember 3, 2026
• elastic apm server Allocation of Resources Without Limits or Throttling in APM Server Leading to Denial of Service CVE-2026-115716 6.5 MediumNovember 3, 2026
• elastic elasticsearch Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service CVE-2026-115715 6.5 MediumNovember 3, 2026
• elastic elasticsearch Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosure CVE-2026-115710 4.2 MediumNovember 3, 2026
• elastic elasticsearch Incorrect Authorization in Elasticsearch Leading to Information Disclosure CVE-2026-115298 4.3 MediumNovember 3, 2026
• elastic packetbeat NULL Pointer Dereference in Packetbeat Leading to Denial of Service CVE-2026-115297 6.5 MediumNovember 3, 2026
• elastic kibana Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure CVE-2026-115295 4.3 MediumNovember 3, 2026
• elastic kibana Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource Deletion CVE-2026-115294 7.3 HighNovember 3, 2026
• elastic kibana Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure CVE-2026-115293 6.5 MediumNovember 3, 2026
• elastic kibana Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure CVE-2026-115292 4.3 MediumNovember 3, 2026
• elastic elasticsearch Uncontrolled Recursion in Elasticsearch Leading to Denial of Service CVE-2026-115290 Public exploit 7.5 HighNovember 3, 2026
• elastic apm server Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information Disclosure CVE-2026-115289 4.3 MediumNovember 3, 2026
• elastic cloud enterprise Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Modification CVE-2026-115713 7.5 HighOctober 29, 2026
• elastic cloud enterprise Incorrect Authorization in Elastic Cloud Enterprise (ECE) Leading to Unauthorized Modification of Platform Settings CVE-2026-115712 4.3 MediumOctober 29, 2026
• elastic cloud enterprise Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Credential Disclosure CVE-2026-115711 6.4 MediumOctober 29, 2026
• elastic cloud enterprise Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Loss CVE-2026-115709 8.2 HighOctober 29, 2026
• elastic cloud enterprise Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication Bypass CVE-2026-115708 7.2 HighOctober 29, 2026
• elastic cloud enterprise Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation CVE-2026-115707 6.4 MediumOctober 29, 2026
• elastic cloud enterprise Authorization Bypass Through User-Controlled Key in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation CVE-2026-115706 6.8 MediumOctober 29, 2026
• elastic endpoint security, opentext endpoint forensics & response, endpoint investigator +1 more +3 more Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents CVE-2026-75120 9.3 CriticalOctober 13, 2026
• elastic elasticsearch Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information Disclosure CVE-2026-103009 Fix available 7.1 HighOctober 6, 2026
• elastic elasticsearch Uncontrolled Recursion in Elasticsearch Leading to Denial of Service CVE-2026-103008 Fix available 6.5 MediumOctober 6, 2026
• elastic elasticsearch Incorrect Authorization in Elasticsearch Leading to Privilege Escalation CVE-2026-103007 Fix available 7.2 HighOctober 6, 2026
• elastic elasticsearch Uncontrolled Recursion in Elasticsearch Leading to Denial of Service CVE-2026-103006 Fix available 6.5 MediumOctober 6, 2026
• elastic elasticsearch Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service CVE-2026-103005 Fix available 6.5 MediumOctober 6, 2026
• elastic agent and elastic defend Uncaught Exception in Elastic Endpoint Leading to Denial of Service CVE-2026-102413 6.2 MediumOctober 6, 2026
• elastic kibana Incorrect Authorization in Kibana Leading to Sensitive Information Disclosure CVE-2026-102412 Fix available 6.5 MediumOctober 6, 2026
• elastic elasticsearch Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service CVE-2026-102411 Fix available 6.5 MediumOctober 6, 2026
• elastic kibana Missing Authorization in Kibana Leading to Information Disclosure CVE-2026-102410 Fix available 4.3 MediumOctober 6, 2026
• elastic elasticsearch Uncontrolled Recursion in Elasticsearch Leading to Denial of Service CVE-2026-102409 Fix available 6.5 MediumOctober 6, 2026
• elastic elasticsearch Inefficient Regular Expression Complexity in Elasticsearch Leading to Denial of Service CVE-2026-102408 Fix available 4.3 MediumOctober 6, 2026
• elastic elasticsearch Incorrect Authorization in Elasticsearch Leading to Unauthorized Data Stream Modification CVE-2026-102407 Fix available 5.4 MediumOctober 6, 2026
• elastic kibana Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception CVE-2026-102406 Fix available 8.8 HighOctober 6, 2026
• elastic elasticsearch Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service CVE-2026-102404 Fix available 6.5 MediumOctober 6, 2026
• elastic endpoint security WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access CVE-2026-13043 Public exploit 9.3 CriticalOctober 1, 2026
• elastic elasticsearch Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service CVE-2026-94408 Fix available 4.9 MediumSeptember 26, 2026
• elastic elasticsearch Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service CVE-2026-94397 Fix available 6.5 MediumSeptember 26, 2026
• elastic elasticsearch Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service CVE-2026-94396 Fix available 6.5 MediumSeptember 26, 2026
• elastic kibana Uncontrolled Resource Consumption in Kibana Leading to denial of service CVE-2026-94400 Fix available 6.5 MediumSeptember 26, 2026
• elastic elasticsearch Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service CVE-2026-94399 Fix available 6.5 MediumSeptember 26, 2026
• elastic elasticsearch Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service CVE-2026-94398 Fix available 6.5 MediumSeptember 26, 2026
• elastic elasticsearch Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service CVE-2026-82300 Fix available 6.5 MediumSeptember 26, 2026
• elastic elasticsearch Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service CVE-2026-82294 Fix available 6.5 MediumSeptember 26, 2026
• elastic kibana Missing Authorization in Kibana Leading to Unauthorized Deletion of Data CVE-2026-78582 Fix available 6.5 MediumSeptember 26, 2026
• elastic kibana Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data CVE-2026-72662 Fix available 6.3 MediumSeptember 26, 2026
• elastic kibana Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Privilege Escalation CVE-2026-72668 Fix available 7.3 HighSeptember 26, 2026
• elastic kibana Incorrect Authorization in Kibana Leading to Unauthorized Configuration Modification CVE-2026-82302 Fix available 8.1 HighSeptember 3, 2026
• elastic kibana Incorrect Authorization in Kibana Leading to Information Disclosure CVE-2026-82299 Fix available 6.5 MediumSeptember 3, 2026
• elastic kibana Incorrect Authorization in Kibana Leading to Denial of Service CVE-2026-82298 Fix available 4.3 MediumSeptember 3, 2026
• elastic kibana Missing Authorization in Kibana Leading to Unauthorized Cross-Space Write Operations CVE-2026-78596 Fix available 4.3 MediumSeptember 3, 2026
• Show olderLoading…