Elastic Fleet Server vulnerabilities
7 published CVEs name Elastic Fleet Server among the affected products.
- 7Published CVEs7 of them scored
- 4Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-78587
Incorrect Authorization in Fleet Server Leading to Denial of Service of Agent Upload Operations
Elastic · Fleet Server
Low3.1 - CVE-2026-72657
Authorization Bypass Through User-Controlled Key in Fleet Server Leading to Information Disclosure
Elastic · Fleet Server
Medium6.5 - CVE-2026-72676
Improper Control of Generation of Code in Fleet Server Leading to Code Injection
Elastic · Fleet Server
Medium6.5 - CVE-2026-56150
Allocation of Resources Without Limits or Throttling in Fleet Server Leading to Denial of Service
Elastic · Fleet Server
Medium6.5 - CVE-2024-52975
Fleet Server sensitive information exposure via logs
Elastic · Fleet Server
Critical9.0 - CVE-2023-31421
Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue
Elastic · Beats
Medium5.9 - CVE-2023-46667
Fleet Server Insertion of Sensitive Information into Log File
Elastic · Fleet Server
High8.1