Elastic vulnerabilities
396 CVEs and advisories name Elastic as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-72673Incorrect Authorization in Kibana Leading to Unauthorized Deletion of Synthetics Private Locations
- CVE-2026-72672Incorrect Authorization in Kibana Leading to Disclosure of Elastic Defend Endpoint Event Data
- CVE-2026-72671Missing Authorization in Kibana Leading to Unauthorized Modification of Machine Learning Trained Model Space Assignments
- CVE-2026-72670Exposure of Sensitive Information to an Unauthorized Actor in Kibana Leading to Disclosure of Fleet Proxy Credentials
- CVE-2026-72669Missing Authorization in Kibana Leading to Cross-User Information Disclosure and Data Tampering
- CVE-2026-72681Missing Authorization in Kibana Leading to Privilege Escalation and Information Disclosure
- CVE-2026-72680Authorization Bypass Through User-Controlled Key in Kibana Agent Builder Leading to Unauthorized Data Modification
- CVE-2026-72679Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
- CVE-2026-72678Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service
- CVE-2026-72687Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service
- CVE-2026-72686Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
- CVE-2026-72685Inefficient Algorithmic Complexity in Elasticsearch Leading to Denial of Service
- CVE-2026-72684Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
- CVE-2026-72683Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
- CVE-2026-49089Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service
- CVE-2026-63263Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
- CVE-2026-63262Missing Authorization in Kibana Leading to Information Disclosure
- CVE-2026-63261Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
- CVE-2026-63260Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
- CVE-2026-63259Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure
- CVE-2026-63145Incorrect Authorization in Kibana Leading to Machine Learning Audit Log Integrity Compromise
- CVE-2026-63144Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
- CVE-2026-63143Missing Authorization in Kibana Leading to Unauthorized Information Disclosure
- CVE-2026-63142Incomplete List of Disallowed Inputs in Kibana Leading to Server-Side Request Forgery
- CVE-2026-63141Missing Authorization in Kibana Leading to Unauthorized Access to Cloud Connect Management Functions
- CVE-2026-63140Reachable Assertion in Elasticsearch Leading to Denial of Service
- CVE-2026-63139Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
- CVE-2026-63136Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
- CVE-2026-56147Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Information Disclosure and Case Attachment Integrity Compromise
- CVE-2026-56146Improper Access Control in Kibana Leading to Unauthorized Data Modification and Information Disclosure