CVE-2026-82294

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130).

Published Sep 26, 2026
CVSS 6.5 medium
0.4% chance of exploitation in the next 30 days (EPSS)

Affected software

Elasticsearch

In the news

Multiple vulnerabilities in Elastic products CERT-FR · Sep 25, 2026

CVE-2026-82294 at the National Vulnerability Database