Skip to contentElastic vulnerabilities
Newest
- elastic elasticsearchUncontrolled Recursion in Elasticsearch Leading to Denial of ServiceCVE-2026-72647Fix available6.5 Medium
- elastic elasticsearchMemory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of ServiceCVE-2026-72645Fix available6.5 Medium
- elastic cloud on kubernetes, eck operator +1 moreCleartext Storage of Sensitive Information in an Environment Variable in Elastic Cloud on Kubernetes Leading to Information DisclosureCVE-2026-726486.5 Medium
- elastic fleet serverAuthorization Bypass Through User-Controlled Key in Fleet Server Leading to Information DisclosureCVE-2026-726576.5 Medium
- elastic elasticsearchMemory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of ServiceCVE-2026-72656Fix available6.5 Medium
- elastic kibanaImproperly Controlled Modification of Dynamically-Determined Object Attributes in Kibana Leading to Unauthorized Data ModificationCVE-2026-72655Fix available4.3 Medium
- elastic kibanaAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceCVE-2026-72653Fix available6.5 Medium
- elastic kibanaAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceCVE-2026-72651Fix available6.5 Medium
- elastic kibanaAuthorization Bypass Through User-Controlled Key in Kibana Leading to Information DisclosureCVE-2026-72650Fix available4.3 Medium
- elastic kibanaInefficient Algorithmic Complexity in Kibana Leading to Denial of ServiceCVE-2026-72663Fix available6.5 Medium
- elastic kibanaMissing Authorization in Kibana Leading to Information DisclosureCVE-2026-72661Fix available6.5 Medium
- elastic kibanaUncaught Exception in Kibana Leading to Denial of ServiceCVE-2026-72660Fix available6.5 Medium
- elastic kibanaAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceCVE-2026-72659Fix available6.5 Medium
- elastic kibanaCross-Site Request Forgery in Kibana Leading to Privilege EscalationCVE-2026-72658Fix available7.3 High
- elastic kibanaAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceCVE-2026-72667Fix available6.5 Medium
- elastic kibanaAuthorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Query Execution on Managed HostsCVE-2026-72666Fix available6.8 Medium
- elastic kibanaMissing Authorization in Kibana Leading to Unauthorized Execution of Host Response ActionsCVE-2026-72665Fix available8.1 High
- elastic kibanaMissing Authorization in Kibana Leading to Unauthorized Execution of Endpoint Response ActionsCVE-2026-72664Fix available6.5 Medium
- elastic kibanaRelative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other ResourcesCVE-2026-72677Fix available7.3 High
- elastic fleet server, kibana +1 moreImproper Control of Generation of Code in Fleet Server Leading to Code InjectionCVE-2026-726766.5 Medium
- elastic kibanaMissing Authorization in Kibana Machine Learning Leading to Cross-Space Information Disclosure and Unauthorized Data ModificationCVE-2026-72675Fix available7.1 High
- elastic kibanaAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceCVE-2026-72674Fix available6.5 Medium
- elastic kibanaIncorrect Authorization in Kibana Leading to Unauthorized Deletion of Synthetics Private LocationsCVE-2026-72673Fix available5.4 Medium
- elastic kibanaIncorrect Authorization in Kibana Leading to Disclosure of Elastic Defend Endpoint Event DataCVE-2026-72672Fix available7.7 High
- elastic kibanaMissing Authorization in Kibana Leading to Unauthorized Modification of Machine Learning Trained Model Space AssignmentsCVE-2026-72671Fix available4.3 Medium
- elastic kibanaExposure of Sensitive Information to an Unauthorized Actor in Kibana Leading to Disclosure of Fleet Proxy CredentialsCVE-2026-72670Fix available7.7 High
- elastic kibanaMissing Authorization in Kibana Leading to Cross-User Information Disclosure and Data TamperingCVE-2026-72669Fix available7.6 High
- elastic kibanaMissing Authorization in Kibana Leading to Privilege Escalation and Information DisclosureCVE-2026-72681Fix available6.5 Medium
- elastic kibanaAuthorization Bypass Through User-Controlled Key in Kibana Agent Builder Leading to Unauthorized Data ModificationCVE-2026-72680Fix available6.5 Medium
- elastic elasticsearchUncontrolled Recursion in Elasticsearch Leading to Denial of ServiceCVE-2026-72679Fix available6.5 Medium
- elastic elasticsearchMemory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of ServiceCVE-2026-72678Fix available6.5 Medium
- elastic elasticsearchMemory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of ServiceCVE-2026-72687Fix available6.5 Medium
- elastic elasticsearchUncontrolled Recursion in Elasticsearch Leading to Denial of ServiceCVE-2026-72686Fix available6.5 Medium
- elastic elasticsearchInefficient Algorithmic Complexity in Elasticsearch Leading to Denial of ServiceCVE-2026-72685Fix available4.3 Medium
- elastic elasticsearchAllocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of ServiceCVE-2026-72684Fix available6.5 Medium
- elastic elasticsearchUncontrolled Recursion in Elasticsearch Leading to Denial of ServiceCVE-2026-72683Fix available6.5 Medium
- elastic kibanaAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceCVE-2026-49089Fix available6.5 Medium
- elastic elasticsearchUncontrolled Resource Consumption in Elasticsearch Leading to Denial of ServiceCVE-2026-63263Fix available6.5 Medium
- elastic kibanaMissing Authorization in Kibana Leading to Information DisclosureCVE-2026-63262Fix available4.3 Medium
- elastic kibanaUncontrolled Resource Consumption in Kibana Leading to Denial of ServiceCVE-2026-63261Fix available6.5 Medium
- elastic kibanaUncontrolled Resource Consumption in Kibana Leading to Denial of ServiceCVE-2026-63260Fix available6.5 Medium
- elastic kibanaAuthorization Bypass Through User-Controlled Key in Kibana Leading to Information DisclosureCVE-2026-63259Fix available4.3 Medium
- elastic kibanaIncorrect Authorization in Kibana Leading to Machine Learning Audit Log Integrity CompromiseCVE-2026-63145Fix available4.3 Medium
- elastic elasticsearchUncontrolled Recursion in Elasticsearch Leading to Denial of ServiceCVE-2026-63144Fix available6.5 Medium
- elastic kibanaMissing Authorization in Kibana Leading to Unauthorized Information DisclosureCVE-2026-63143Fix available4.3 Medium
- elastic kibanaIncomplete List of Disallowed Inputs in Kibana Leading to Server-Side Request ForgeryCVE-2026-63142Fix available5.0 Medium
- elastic kibanaMissing Authorization in Kibana Leading to Unauthorized Access to Cloud Connect Management FunctionsCVE-2026-63141Fix available6.3 Medium
- elastic elasticsearchReachable Assertion in Elasticsearch Leading to Denial of ServiceCVE-2026-63140Fix available6.5 Medium
- elastic kibanaUncontrolled Resource Consumption in Kibana Leading to Denial of ServiceCVE-2026-63139Fix available6.5 Medium
- elastic elasticsearchUncontrolled Resource Consumption in Elasticsearch Leading to Denial of ServiceCVE-2026-63136Fix available6.5 Medium
- Show moreLoading…