CVE-2026-94396

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

  • Published Sep 26, 2026
  • CVSS 6.5 medium
  • 0.4% chance of exploitation in the next 30 days (EPSS)

Affected software

In the news

CVE-2026-94396 at the National Vulnerability Database