Elastic Elasticsearch vulnerabilities
91 published CVEs name Elastic Elasticsearch among the affected products.
- 91Published CVEs91 of them scored
- 51Last 12 monthspublished in the last year
- 0Critical12 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-115715
Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
Elastic · Elasticsearch
Medium6.5 - CVE-2026-115710
Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosure
Elastic · Elasticsearch
Medium4.2 - CVE-2026-115298
Incorrect Authorization in Elasticsearch Leading to Information Disclosure
Elastic · Elasticsearch
Medium4.3 - CVE-2026-115290
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
Elastic · Elasticsearch
High7.5 - CVE-2026-103009
Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information Disclosure
Elastic · Elasticsearch
High7.1 - CVE-2026-103008
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
Elastic · Elasticsearch
Medium6.5 - CVE-2026-103007
Incorrect Authorization in Elasticsearch Leading to Privilege Escalation
Elastic · Elasticsearch
High7.2 - CVE-2026-103006
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
Elastic · Elasticsearch
Medium6.5 - CVE-2026-103005
Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service
Elastic · Elasticsearch
Medium6.5 - CVE-2026-102411
Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
Elastic · Elasticsearch
Medium6.5