| CVE-2026-72636 |
Uncontrolled Recursion (CWE-674) in the Elasticsearch wildcard matching helper can lead to a denial of service via…
|
6.5
Medium
|
Aug 13, 2026 |
| CVE-2026-72642 |
The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model…
|
8.8
High
|
Aug 13, 2026 |
| CVE-2026-72639 |
Elasticsearch does not enforce an upper bound on a user-supplied count accepted by a search highlighting option, and the…
|
6.5
Medium
|
Aug 13, 2026 |
| CVE-2026-72638 |
Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153)
|
6.5
Medium
|
Aug 13, 2026 |
| CVE-2026-72647 |
Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads…
|
6.5
Medium
|
Aug 13, 2026 |
| CVE-2026-72645 |
Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive…
|
6.5
Medium
|
Aug 13, 2026 |
| CVE-2026-72656 |
Memory Allocation with Excessive Size Value (CWE-789) in the ES|QL query processing of Elasticsearch can lead to…
|
6.5
Medium
|
Aug 13, 2026 |
| CVE-2026-72679 |
Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an…
|
6.5
Medium
|
Aug 13, 2026 |
| CVE-2026-72678 |
Elasticsearch does not validate a size value taken from a user-supplied input before that value is used to reserve…
|
6.5
Medium
|
Aug 13, 2026 |
| CVE-2026-72687 |
A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a…
|
6.5
Medium
|
Aug 13, 2026 |
| CVE-2026-72686 |
A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted…
|
6.5
Medium
|
Aug 13, 2026 |
| CVE-2026-72685 |
A flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small…
|
4.3
Medium
|
Aug 13, 2026 |
| CVE-2026-72684 |
A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request…
|
6.5
Medium
|
Aug 13, 2026 |
| CVE-2026-72683 |
A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API…
|
6.5
Medium
|
Aug 13, 2026 |
| CVE-2026-63263 |
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data…
|
6.5
Medium
|
Jul 21, 2026 |
| CVE-2026-63144 |
Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request…
|
6.5
Medium
|
Jul 21, 2026 |
| CVE-2026-63140 |
Reachable Assertion (CWE-617) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153)
|
6.5
Medium
|
Jul 21, 2026 |
| CVE-2026-63136 |
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation…
|
6.5
Medium
|
Jul 21, 2026 |
| CVE-2026-56145 |
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation…
|
6.5
Medium
|
Jul 21, 2026 |
| CVE-2026-56144 |
Incorrect Authorization (CWE-863) in Elasticsearch can allow an authenticated user with limited index privileges to…
|
5.3
Medium
|
Jul 21, 2026 |
| CVE-2026-49090 |
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to a denial of service via Excessive Allocation…
|
6.5
Medium
|
Jul 1, 2026 |
| CVE-2026-56149 |
Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via…
|
4.9
Medium
|
Jul 1, 2026 |
| CVE-2026-56148 |
Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130)
|
6.5
Medium
|
Jul 1, 2026 |
| CVE-2025-68390 |
Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with…
|
4.9
Medium
|
Dec 18, 2025 |
| CVE-2025-68384 |
Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow a low-privileged authenticated…
|
6.5
Medium
|
Dec 18, 2025 |