Elastic Apm Server vulnerabilities

• elastic apm server Allocation of Resources Without Limits or Throttling in APM Server Leading to Denial of Service CVE-2026-115716 6.5 MediumNovember 3, 2026
• elastic apm server Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information Disclosure CVE-2026-115289 4.3 MediumNovember 3, 2026
• elastic apm server Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service CVE-2026-78594 4.9 MediumSeptember 2, 2026
• elastic apm server APM Server Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows Installer CVE-2025-0712 7.0 HighJuly 30, 2025
• elastic apm server APM Server Insertion of Sensitive Information into Log File CVE-2024-11994 5.7 MediumMay 1, 2025
• elastic apm server APM Server Insertion of Sensitive Information into Log File CVE-2024-37286 Fix available 5.7 MediumAugust 3, 2024
• elastic apm server APM Server Insertion of Sensitive Information into Log File CVE-2024-23448 Fix available 5.7 MediumFebruary 7, 2024
• elastic apm server, beats, agent +1 more +3 more Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue CVE-2023-31421 5.9 MediumOctober 26, 2023