Skip to contentElastic vulnerabilities
Newest
- elastic kibanaAuthorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Information Disclosure and Case Attachment Integrity CompromiseCVE-2026-56147Fix available7.1 High
- elastic kibanaImproper Access Control in Kibana Leading to Unauthorized Data Modification and Information DisclosureCVE-2026-56146Fix available5.4 Medium
- elastic elasticsearchUncontrolled Resource Consumption in Elasticsearch Leading to Denial of ServiceCVE-2026-56145Fix available6.5 Medium
- elastic elasticsearchIncorrect Authorization in Elasticsearch Leading to Information DisclosureCVE-2026-56144Fix available5.3 Medium
- elastic kibanaAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceCVE-2026-42397Fix available6.5 Medium
- elastic kibanaUnintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Unauthorized Information ExposureCVE-2026-49092Fix available4.3 Medium
- elastic kibanaImproper Output Neutralization for Logs in Kibana Leading to Log InjectionCVE-2026-490918.0 High
- elastic elasticsearchUncontrolled Resource Consumption in Elasticsearch Leading to Denial of ServiceCVE-2026-49090Fix available6.5 Medium
- elastic kibanaInsertion of Sensitive Information into Log File in Kibana Leading to Information DisclosureCVE-2026-490884.4 Medium
- elastic kibanaAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceCVE-2026-490876.5 Medium
- elastic kibana, endpoint security +1 moreIncorrect Authorization in Kibana Leading to Information DisclosureCVE-2026-561525.3 Medium
- elastic kibanaImproper Input Validation in Kibana Leading to Denial of ServiceCVE-2026-561516.5 Medium
- elastic fleet serverAllocation of Resources Without Limits or Throttling in Fleet Server Leading to Denial of ServiceCVE-2026-561506.5 Medium
- elastic elasticsearchAllocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of ServiceCVE-2026-56149Fix available4.9 Medium
- elastic elasticsearchUncontrolled Recursion in Elasticsearch Leading to Denial of ServiceCVE-2026-56148Fix available6.5 Medium
- elastic kibanaServer-Side Request Forgery (SSRF) in Kibana Leading to Unauthorized Network AccessCVE-2026-49093Fix available6.3 Medium
- elastic kibanaUncontrolled Resource Consumption in Kibana Leading to Denial of ServiceCVE-2026-49094Fix available6.5 Medium
- elastic kibanaImproper Input Validation in Kibana Fleet Leading to Privilege EscalationCVE-2026-49095Fix available7.2 High
- elastic kibanaServer-Side Request Forgery (SSRF) in Kibana Leading to Unauthorized Network AccessCVE-2026-42398Fix available7.7 High
- elastic kibanaUncontrolled Resource Consumption in Kibana Leading to Denial of ServiceCVE-2026-42399Fix available6.5 Medium
- elastic kibanaUncontrolled Resource Consumption in Kibana Leading to Denial of ServiceCVE-2026-42400Fix available6.5 Medium
- elastic kibanaImproper Neutralization of Input During Web Page Generation in Kibana Leading to Stored HTML InjectionCVE-2026-42401Fix available4.1 Medium
- elastic kibanaOperation on a Resource after Expiration or Termination in Kibana Leading to Unauthorized File AccessCVE-2026-33463Fix available5.3 Medium
- elastic kibanaUncontrolled Resource Consumption in Kibana Leading to Denial of ServiceCVE-2026-33464Fix available6.5 Medium
- elastic kibanaPath Traversal in Kibana Leading to Unauthorized Deletion of User AccountsCVE-2026-33462Fix available4.6 Medium
- elastic package registryImproper Verification of Cryptographic Signature in Elastic Package Registry Leading to Package Integrity BypassCVE-2026-33467Fix available5.9 Medium
- elastic logstashImproper Limitation of a Pathname to a Restricted Directory in Logstash Leading to Arbitrary File WriteCVE-2026-33466Fix available8.1 High
- elastic kibanaServer-Side Request Forgery (SSRF) in Kibana One Workflow Leading to Information DisclosureCVE-2026-33458Fix available6.8 Medium
- elastic kibanaUncontrolled Resource Consumption in Kibana Leading to Denial of ServiceCVE-2026-33459Fix available6.5 Medium
- elastic kibanaIncorrect Authorization in Kibana Fleet Leading to Information DisclosureCVE-2026-33460Fix available4.3 Medium
- elastic kibanaIncorrect Authorization in Kibana Fleet Leading to Information DisclosureCVE-2026-33461Fix available7.7 High
- elastic kibanaExecution with Unnecessary Privileges in Kibana Leading to reading index data beyond their direct Elasticsearch RBAC scopeCVE-2026-4498Fix available7.7 High
- elastic kibanaImproper Validation of Specified Quantity in Input in Kibana Leading to Denial of ServiceCVE-2026-269406.5 Medium
- elastic kibanaMissing Authorization in Kibana Leading to Unauthorized Endpoint Response Action ConfigurationCVE-2026-269396.5 Medium
- elastic packetbeatImproper Validation of Array Index in Packetbeat Leading to Denial of ServiceCVE-2026-26933Fix available5.7 Medium
- elastic metricbeatMemory Allocation with Excessive Size Value in Metricbeat Leading to Denial of ServiceCVE-2026-26931Fix available5.7 Medium
- elastic kibanaImproper Neutralization of Special Elements Used in a Template Engine in Kibana Workflows Leading to Server-Side Request Forgery (SSRF)CVE-2026-26938Fix available8.6 High
- elastic kibanaUncontrolled Resource Consumption in Kibana Leading to Denial of ServiceCVE-2026-26937Fix available6.5 Medium
- elastic kibanaInefficient Regular Expression Complexity in Kibana Leading to Denial of ServiceCVE-2026-26936Fix available4.9 Medium
- elastic kibanaImproper Input Validation in Kibana Leading to Denial of ServiceCVE-2026-26935Fix available6.5 Medium
- elastic kibanaImproper Validation of Specified Quantity in Input in Kibana Leading to Denial of ServiceCVE-2026-26934Fix available6.5 Medium
- elastic packetbeatImproper Validation of Array Index in Packetbeat Leading to Denial of ServiceCVE-2026-269325.7 Medium
- elastic kibana, red hat logging subsystem for red hat openshift, jboss enterprise application platform 8 +3 more +5 moreExternal Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini ConnectorCVE-2026-0532Fix available8.6 High
- elastic packetbeatImproper Validation of Array Index in Packetbeat Leading to Overflow BuffersCVE-2026-05296.5 Medium
- elastic kibanaImproper Input Validation in Kibana Email Connector Leading to Excessive AllocationCVE-2026-0543Fix available6.5 Medium
- elastic kibanaAllocation of Resources Without Limits or Throttling in Kibana FleetCVE-2026-0531Fix available6.5 Medium
- elastic kibanaAllocation of Resources Without Limits or Throttling in Kibana Leading to Excessive AllocationCVE-2026-0530Fix available6.5 Medium
- elastic metricbeat, kibana +1 moreImproper Input Validation in Metricbeat Leading to Denial of ServiceCVE-2026-0528Fix available6.5 Medium
- elastic kibanaKibana Improper AuthorizationCVE-2025-68422Fix available4.3 Medium
- elastic kibanaKibana Improper AuthorizationCVE-2025-68386Fix available4.3 Medium
- Show moreLoading…