Skip to content

Known vulnerabilities in Elastic Packetbeat

Is your version affected?

CVE Summary Score Published
CVE-2026-115297 NULL Pointer Dereference (CWE-476) in the AMQP protocol parser in Packetbeat can lead to denial of service via specially… 6.5 Medium Nov 3, 2026
CVE-2026-26933 Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of… 5.7 Medium Mar 19, 2026
CVE-2026-26932 Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can lead Denial of… 5.7 Medium Feb 26, 2026
CVE-2026-0529 Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause… 6.5 Medium Jan 14, 2026
CVE-2025-68382 Out-of-bounds read (CWE-125) allows an unauthenticated remote attacker to perform a buffer overflow (CAPEC-100) via… 6.5 Medium Dec 18, 2025
CVE-2025-68381 Improper Bounds Check (CWE-787) in Packetbeat can allow a remote unauthenticated attacker to exploit a Buffer Overflow… 6.5 Medium Dec 18, 2025
CVE-2025-68388 Allocation of resources without limits or throttling (CWE-770) allows an unauthenticated remote attacker to cause… 5.3 Medium Dec 18, 2025
CVE-2017-11480 Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler Not rated Dec 8, 2017

Other Elastic products