Elastic Fleet Server vulnerabilities

• elastic fleet server Incorrect Authorization in Fleet Server Leading to Denial of Service of Agent Upload Operations CVE-2026-78587 3.1 LowSeptember 2, 2026
• elastic fleet server Authorization Bypass Through User-Controlled Key in Fleet Server Leading to Information Disclosure CVE-2026-72657 6.5 MediumAugust 13, 2026
• elastic fleet server, kibana +1 more Improper Control of Generation of Code in Fleet Server Leading to Code Injection CVE-2026-72676 6.5 MediumAugust 13, 2026
• elastic fleet server Allocation of Resources Without Limits or Throttling in Fleet Server Leading to Denial of Service CVE-2026-56150 6.5 MediumJuly 1, 2026
• elastic fleet server Fleet Server sensitive information exposure via logs CVE-2024-52975 9.0 CriticalJanuary 23, 2025
• elastic apm server, beats, agent +1 more +3 more Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue CVE-2023-31421 5.9 MediumOctober 26, 2023
• elastic fleet server Fleet Server Insertion of Sensitive Information into Log File CVE-2023-46667 8.1 HighOctober 26, 2023