Elasticsearch

Latest vulnerabilities

• CVE-2026-94408 CVSS 4.9 medium Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)
• CVE-2026-94399 CVSS 6.5 medium Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)
• CVE-2026-94398 CVSS 6.5 medium Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)
• CVE-2026-94397 CVSS 6.5 medium Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)
• CVE-2026-94396 CVSS 6.5 medium Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)
• CVE-2026-82300 CVSS 6.5 medium Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130).
• CVE-2026-82294 CVSS 6.5 medium Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130).
• CVE-2026-78607 CVSS 7.1 high Missing Authorization (CWE-862) in the Elasticsearch custom inference service can lead to information disclosure via Privilege Abuse…
• CVE-2026-78605 CVSS 5.9 medium Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') (CWE-444) in Elasticsearch can lead to information disclosure via…
• CVE-2026-72649 CVSS 8.8 high Deserialization of Untrusted Data (CWE-502) in the Elasticsearch machine learning component can lead to remote code execution via Object…
• CVE-2026-56143 CVSS 4.9 medium Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Excessive Allocation…