Known Vulnerabilities for Endpoint Security by Elastic
Listed below are 5 of the newest known vulnerabilities associated with "Endpoint Security" by "Elastic".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-58404 json | Hugo is a static site generator. From v0.162.0 through v0.163.0, the default security.http.urls policy denies requests to loo... | Not Provided | 2026-07-06 | 2026-07-07 |
| CVE-2026-58371 json | SeaweedFS before 4.30 reflects the callback query parameter verbatim into responses served with Content-Type application/java... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-56338 json | Capgo before 12.128.2 contains a denial of service vulnerability in the /auth/v1/otp endpoint that prevents email verificatio... | Not Provided | 2026-06-24 | 2026-06-24 |
| CVE-2026-56264 json | Crawl4AI before 0.8.7 contains an arbitrary JavaScript execution vulnerability in the Docker API server's /execute_js endpoin... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-56248 json | Cap-go capgo (capgo-backend) before 12.128.12 contains an unauthenticated denial-of-service vulnerability arising from the au... | Not Provided | 2026-06-23 | 2026-06-23 |
| CVE-2026-56242 json | Capgo before 12.128.2 contains an unauthenticated security definer RPC function get_identity_apikey_only that returns the own... | Not Provided | 2026-06-21 | 2026-06-22 |
| CVE-2026-56213 json | Capgo before 12.128.2 contains an authorization bypass vulnerability in the public.upsert_version_meta SECURITY DEFINER funct... | Not Provided | 2026-06-20 | 2026-06-22 |
| CVE-2026-56152 json | Not Provided | 2026-07-01 | 2026-07-06 | |
| CVE-2026-54303 json | n8n is an open source workflow automation platform. Prior to 2.24.0, an endpoint in the Meta and Microsoft Teams trigger node... | Not Provided | 2026-06-23 | 2026-06-24 |
| CVE-2026-50635 json | LimeSurvey constructs account password-reset links from the client-supplied HTTP Host header without validating it. The optio... | Not Provided | 2026-06-09 | 2026-06-09 |