Known vulnerabilities in Elastic Stack Elasticsearch 7.6.1

Vendor: Elastic Stack
Website: https://www.elastic.co/
Total Security Bulletins: 16

Security bulletins (16)

Secuity bulletin Severity Status Published
SB20260113101: Elasticsearch update for LZ4 Java library Medium
Patched
13.01.2026
SB2025121916: Authenticated denial of service in Elasticsearch Medium
Patched
19.12.2025
SB2025121524: Multiple vulnerabilities in Elasticsearch Medium
Patched
15.12.2025
SB2025100653: Inclusion of sensitive information into log files in Elasticsearch Medium
Patched
06.10.2025
SB2025050126: Authenticated denial of service in Elasticsearch Medium
Patched
01.05.2025
SB2025012117: Denial of service in Elasticsearch Medium
Patched
21.01.2025
SB2024080141: Insecure storage of private key in Elasticsearch Low
Patched
01.08.2024
SB2024032832: Denial of service in Elasticsearch Medium
Patched
28.03.2024
SB2023112219: Denial of service in Elasticsearch Medium
Patched
22.11.2023
SB2023092233: Remote denial of service in Elasticsearch and Elastic Cloud Enterprise Medium
Patched
22.09.2023
SB2023091904: Denial of service in Elasticsearch Medium
Patched Public exploit
19.09.2023
SB2023091162: Inclusion of sensitive information into log files in Elasticsearch Low
Patched
11.09.2023
SB2023063048: Denial of service in Elasticsearch OpenID Connect Medium
Patched
30.06.2023
SB2021032502: Multiple vulnerabilities in Elasticsearch Low
Patched
25.03.2021
SB2021021101: Information disclosure in Elasticsearch Low
Patched
11.02.2021
SB2020040158: Privilege escalation in Elasticsearch Medium
Patched
01.04.2020