Known Vulnerabilities for products from Elastic
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Elastic".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-103009 json | Authorization Bypass Through User-Controlled Key (CWE-639) in Elasticsearch can lead to Information Disclosure via a speciall... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-103007 json | Incorrect Authorization (CWE-863) in Elasticsearch can lead to Privilege Escalation via a delegated administrative privilege ... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-103006 json | Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested reques... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-103005 json | Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-102413 json | Not Provided | 2026-10-06 | 2026-10-06 | |
| CVE-2026-102412 json | Incorrect Authorization (CWE-863) in Kibana can lead to sensitive information disclosure via Accessing Functionality Not Prop... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-102411 json | Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to Denial of Service via Excessive A... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-102410 json | Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constra... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-102409 json | Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an Elastic... | Not Provided | 2026-10-06 | 2026-10-13 |
| CVE-2026-102408 json | Inefficient Regular Expression Complexity (CWE-1333) in Elasticsearch can lead to denial of service via Regular Expression Ex... | Not Provided | 2026-10-06 | 2026-10-13 |
| CVE-2026-102407 json | Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing Functional... | Not Provided | 2026-10-06 | 2026-10-13 |
| CVE-2026-102406 json | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception. In this co... | Not Provided | 2026-10-06 | 2026-10-13 |
| CVE-2026-102404 json | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-13... | Not Provided | 2026-10-06 | 2026-10-13 |
| CVE-2026-101793 json | Not Provided | 2026-10-20 | 2026-10-20 | |
| CVE-2026-101792 json | Not Provided | 2026-10-20 | 2026-10-20 | |
| CVE-2026-101791 json | Not Provided | 2026-10-20 | 2026-10-22 | |
| CVE-2026-101790 json | Not Provided | 2026-10-20 | 2026-10-20 | |
| CVE-2026-101763 json | Not Provided | 2026-10-20 | 2026-10-21 | |
| CVE-2026-100696 json | Not Provided | 2026-09-26 | 2026-09-28 | |
| CVE-2026-94408 json | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) | Not Provided | 2026-09-26 | 2026-10-06 |
Known software with vulnerabilities from Elastic
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Elastic | Apm-agent-ruby | - |
| Application | Elastic | Apm Agent | - |
| Application | Elastic | Elasticsearch | 0.10.0 |
| Application | Elastic | Elasticsearch X-pack | 5.0.0 |
| Application | Elastic | Elastic App Search | 7.7.0 |
| Application | Elastic | Elastic Cloud Enterprise | 1.0.0 |
| Application | Elastic | Elastic Cloud On Kubernetes | 1.1.0 |
| Application | Elastic | Enterprise Search | - |
| Application | Elastic | Kibana | 0.10.0 |
| Application | Elastic | Kibana Reporting | 2.4.0 |
| Application | Elastic | Kibana X-pack | 5.0.0 |
| Application | Elastic | Logstash | 1.0.0 |
| Application | Elastic | Logstash X-pack | 5.6.0 |
| Application | Elastic | Winlogbeat | 1.1.0 |
| Application | Elastic | X-pack | 5.0.0 |