Elastic vulnerabilities
396 CVEs and advisories name Elastic as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-115714Improper Certificate Validation in Elastic Docker Images Leading to Interception of TLS Connections
- CVE-2026-115716Allocation of Resources Without Limits or Throttling in APM Server Leading to Denial of Service
- CVE-2026-115715Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
- CVE-2026-115710Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosure
- CVE-2026-115298Incorrect Authorization in Elasticsearch Leading to Information Disclosure
- CVE-2026-115297NULL Pointer Dereference in Packetbeat Leading to Denial of Service
- CVE-2026-115295Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure
- CVE-2026-115294Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource Deletion
- CVE-2026-115293Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure
- CVE-2026-115292Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure
- CVE-2026-115290Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
- CVE-2026-115289Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information Disclosure
- CVE-2026-115713Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and…
- CVE-2026-115712Incorrect Authorization in Elastic Cloud Enterprise (ECE) Leading to Unauthorized Modification of Platform Settings
- CVE-2026-115711Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Credential…
- CVE-2026-115709Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and…
- CVE-2026-115708Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication Bypass
- CVE-2026-115707Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Privilege…
- CVE-2026-115706Authorization Bypass Through User-Controlled Key in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation
- CVE-2026-103009Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information Disclosure
- CVE-2026-103008Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
- CVE-2026-103007Incorrect Authorization in Elasticsearch Leading to Privilege Escalation
- CVE-2026-103006Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
- CVE-2026-103005Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service
- CVE-2026-102413Uncaught Exception in Elastic Endpoint Leading to Denial of Service
- CVE-2026-102412Incorrect Authorization in Kibana Leading to Sensitive Information Disclosure
- CVE-2026-102411Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
- CVE-2026-102410Missing Authorization in Kibana Leading to Information Disclosure
- CVE-2026-102409Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
- CVE-2026-102408Inefficient Regular Expression Complexity in Elasticsearch Leading to Denial of Service