Known vulnerabilities in Elasticsearch 8.19.22

Software: Elasticsearch
Version: 8.19.22
Software CPE: cpe:2.3:a:elastic_stack:elasticsearch:*:*:*:*:*:*:*:*
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Elasticsearch version 8.19.22 Elasticsearch 8.19.22 is affected by 5 vulnerabilities: 5 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153938 - Resource exhaustion
CVE-2026-102404
CWE-400 Low
No
No
8.19.23, 9.4.8, 9.5.5 07.10.2026 SB20261007240
#VU153937 - Uncontrolled Memory Allocation
CVE-2026-103005
CWE-789 Low
No
No
8.19.23, 9.4.8, 9.5.5 07.10.2026 SB20261007240
#VU153936 - Uncontrolled Recursion
CVE-2026-103008
CWE-674 Low
No
No
8.19.23, 9.4.8, 9.5.5 07.10.2026 SB20261007240
#VU153935 - Authorization Bypass Through User-Controlled Key
CVE-2026-103009
CWE-639 Low
No
No
8.19.23, 9.4.8, 9.5.5 07.10.2026 SB20261007240
#VU153934 - Allocation of Resources Without Limits or Throttling
CVE-2026-102411
CWE-770 Low
No
No
8.19.23, 9.4.7, 9.5.3 07.10.2026 SB20261007240