| CVE-2026-115715 |
Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to denial of service via a…
|
6.5
Medium
|
Nov 3, 2026 |
| CVE-2026-115710 |
Use of Cache Containing Sensitive Information (CWE-524) in Elasticsearch can lead to information disclosure and…
|
4.2
Medium
|
Nov 3, 2026 |
| CVE-2026-115298 |
Incorrect Authorization (CWE-863) in Elasticsearch can lead to information disclosure via Accessing Functionality Not…
|
4.3
Medium
|
Nov 3, 2026 |
| CVE-2026-115290 |
Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads…
|
7.5
High
|
Nov 3, 2026 |
| CVE-2026-103009 |
Authorization Bypass Through User-Controlled Key (CWE-639) in Elasticsearch can lead to Information Disclosure via a…
|
7.1
High
|
Oct 6, 2026 |
| CVE-2026-103008 |
Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted request that…
|
6.5
Medium
|
Oct 6, 2026 |
| CVE-2026-103007 |
Incorrect Authorization (CWE-863) in Elasticsearch can lead to Privilege Escalation via a delegated administrative…
|
7.2
High
|
Oct 6, 2026 |
| CVE-2026-103006 |
Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested…
|
6.5
Medium
|
Oct 6, 2026 |
| CVE-2026-103005 |
Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive…
|
6.5
Medium
|
Oct 6, 2026 |
| CVE-2026-102411 |
Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to Denial of Service via…
|
6.5
Medium
|
Oct 6, 2026 |
| CVE-2026-102409 |
Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an…
|
6.5
Medium
|
Oct 6, 2026 |
| CVE-2026-102408 |
Inefficient Regular Expression Complexity (CWE-1333) in Elasticsearch can lead to denial of service via Regular…
|
4.3
Medium
|
Oct 6, 2026 |
| CVE-2026-102407 |
Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing…
|
5.4
Medium
|
Oct 6, 2026 |
| CVE-2026-102404 |
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation…
|
6.5
Medium
|
Oct 6, 2026 |
| CVE-2026-94408 |
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation…
|
4.9
Medium
|
Sep 26, 2026 |
| CVE-2026-94397 |
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation…
|
6.5
Medium
|
Sep 26, 2026 |
| CVE-2026-94396 |
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation…
|
6.5
Medium
|
Sep 26, 2026 |
| CVE-2026-94399 |
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation…
|
6.5
Medium
|
Sep 26, 2026 |
| CVE-2026-94398 |
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation…
|
6.5
Medium
|
Sep 26, 2026 |
| CVE-2026-82300 |
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation…
|
6.5
Medium
|
Sep 26, 2026 |
| CVE-2026-82294 |
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation…
|
6.5
Medium
|
Sep 26, 2026 |
| CVE-2026-78607 |
Missing Authorization (CWE-862) in the Elasticsearch custom inference service can lead to information disclosure via…
|
5.4
Medium
|
Sep 1, 2026 |
| CVE-2026-78605 |
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') (CWE-444) in Elasticsearch can lead to…
|
5.9
Medium
|
Sep 1, 2026 |
| CVE-2026-72649 |
Deserialization of Untrusted Data (CWE-502) in the Elasticsearch machine learning component can lead to remote code…
|
8.8
High
|
Sep 1, 2026 |
| CVE-2026-56143 |
Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via…
|
4.9
Medium
|
Sep 1, 2026 |