Skip to contentElastic vulnerabilities
Newest
- elastic kibanaMissing Authorization in Kibana Fleet Plugin Leading to Cross-Space Agent Data DisclosureCVE-2026-78595Fix available4.3 Medium
- elastic kibanaImproper Control of Generation of Code in Kibana Leading to Privilege EscalationCVE-2026-78593Fix available4.3 Medium
- elastic kibanaIncorrect Authorization in Kibana Leading to Privilege EscalationCVE-2026-78583Fix available8.1 High
- elastic kibanaIncorrect Authorization in Kibana Leading to Unauthorized Resource ConsumptionCVE-2026-82293Fix available4.3 Medium
- elastic filebeatAllocation of Resources Without Limits or Throttling in Filebeat Leading to Denial of ServiceCVE-2026-785886.5 Medium
- elastic fleet serverIncorrect Authorization in Fleet Server Leading to Denial of Service of Agent Upload OperationsCVE-2026-785873.1 Low
- elastic kibanaAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceCVE-2026-785866.5 Medium
- elastic kibanaObservable Response Discrepancy in Kibana Leading to Cross-Space Information DisclosureCVE-2026-785844.3 Medium
- elastic kibanaImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Kibana Leading to Unauthorized Resource DeletionCVE-2026-785916.3 Medium
- elastic kibanaImproper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged ResourcesCVE-2026-785907.3 High
- elastic kibanaStored Path Traversal in Kibana Leading to Unauthorized Deletion of Internal ResourcesCVE-2026-785996.5 Medium
- elastic kibanaIncorrect Authorization in Kibana Leading to Unauthorized Cross-Space Exposure of Machine Learning Job DataCVE-2026-785985.4 Medium
- elastic apm serverImproper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of ServiceCVE-2026-785944.9 Medium
- elastic agentIncorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEMCVE-2026-786047.8 High
- elastic maps serverImproper Limitation of a Pathname to a Restricted Directory in Elastic Maps Server Leading to Unauthorized File DisclosureCVE-2026-786025.3 Medium
- elastic kibanaMissing Authorization in Kibana Leading to Unauthorized Elasticsearch Index Data ExposureCVE-2026-786015.5 Medium
- elastic cloud on kubernetes, eck operator +1 moreIncomplete Cleanup in Elastic Cloud on Kubernetes Leading to Unauthorized Cross-Namespace Credential RetentionCVE-2026-786003.5 Low
- elastic cloud on kubernetes, eck operator +1 moreIncorrect Authorization in Elastic Cloud on Kubernetes Leading to Unauthorized Modification of DataCVE-2026-786095.4 Medium
- elastic kibanaImproper Neutralization of Special Elements in Data Query Logic in Kibana Leading to Information DisclosureCVE-2026-631386.5 Medium
- elastic kibanaMissing Authorization in Kibana Entity Store Leading to Unauthorized API Key CreationCVE-2026-785974.3 Medium
- elastic kibanaImproper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged ResourcesCVE-2026-785927.3 High
- elastic kibanaIncorrect Authorization in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of DataCVE-2026-786064.2 Medium
- elastic kibanaMissing Authorization in Kibana Leading to Unauthorized Disclosure of Fleet Deployment MetadataCVE-2026-786034.3 Medium
- elastic elasticsearchMissing Authorization in Elasticsearch Leading to Information DisclosureCVE-2026-78607Fix available5.4 Medium
- elastic kibanaMissing Authorization in Kibana Leading to Information DisclosureCVE-2026-786086.5 Medium
- elastic elasticsearchInconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Elasticsearch Leading to Information DisclosureCVE-2026-78605Fix available5.9 Medium
- elastic kibanaExecution with Unnecessary Privileges in Kibana Leading to Information DisclosureCVE-2026-726546.5 Medium
- elastic kibanaIncorrect Authorization in Kibana Leading to Unauthorized Disabling of Privilege MonitoringCVE-2026-72633Fix available4.3 Medium
- elastic kibanaIncorrect Authorization in Kibana Leading to Unauthorized Modification of DataCVE-2026-726415.4 Medium
- elastic kibanaImproper Handling of Highly Compressed Data in Kibana Leading to Denial of ServiceCVE-2026-726286.5 Medium
- elastic kibanaUncaught Exception in Kibana Leading to Denial of ServiceCVE-2026-726446.5 Medium
- elastic elasticsearchDeserialization of Untrusted Data in Elasticsearch Leading to Remote Code ExecutionCVE-2026-72649Fix available8.8 High
- elastic kibanaAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceCVE-2026-726826.5 Medium
- elastic kibanaIncorrect Authorization in Kibana Leading to Privilege EscalationCVE-2026-631378.3 High
- elastic kibanaAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceCVE-2026-726526.5 Medium
- elastic elasticsearchAllocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of ServiceCVE-2026-56143Fix available4.9 Medium
- elastic kibanaAllocation of Resources Without Limits or Throttling in Kibana Leading to Denial of ServiceCVE-2026-334656.5 Medium
- elastic winlogbeat, security +1 moreImproper Link Resolution Before File Access ('Link Following') in Winlogbeat Leading to Arbitrary File Write and Denial of ServiceCVE-2024-140477.2 High
- elastic kibanaAuthorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Data Modification in KibanaCVE-2026-78581Fix available4.2 Medium
- elastic kibanaUncaught Exception in Kibana Cases Leading to Denial of ServiceCVE-2026-49096Fix available4.3 Medium
- elastic elasticsearchUncontrolled Recursion in Elasticsearch Wildcard Matching Leading to Denial of ServiceCVE-2026-72636Fix available6.5 Medium
- elastic kibanaObservable Discrepancy in Kibana Fleet Leading to Disclosure of Elastic Agent Elasticsearch API KeysCVE-2026-72632Fix available7.1 High
- elastic kibanaImproper Privilege Management in Kibana Fleet Leading to Over-Scoped Elastic Agent API KeysCVE-2026-72631Fix available6.5 Medium
- elastic kibanaIncorrect Authorization in Kibana Fleet Leading to Privilege EscalationCVE-2026-72630Fix available7.1 High
- elastic kibanaAuthorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Space Access to Machine Learning Trained ModelsCVE-2026-72629Fix available7.1 High
- elastic kibanaIncorrect Authorization in Kibana Agent Builder Leading to Disclosure and Tampering of Private AgentsCVE-2026-72643Fix available7.1 High
- elastic elasticsearchUse of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inference ProcessCVE-2026-72642Fix available8.8 High
- elastic cloud on kubernetes, eck operator +1 moreUnintended Proxy or Intermediary in Elastic Cloud on Kubernetes Leading to Cross-Namespace Secret DisclosureCVE-2026-726406.5 Medium
- elastic elasticsearchMemory Allocation with Excessive Size Value in Elasticsearch Highlighting Leading to Denial of ServiceCVE-2026-72639Fix available6.5 Medium
- elastic elasticsearchUncontrolled Recursion in Elasticsearch Leading to Denial of ServiceCVE-2026-72638Fix available6.5 Medium
- Show moreLoading…