Known vulnerabilities in Elasticsearch - page 4

Software: Elasticsearch
Software CPE: cpe:2.3:a:elastic_stack:elasticsearch:*:*:*:*:*:*:*:*
Total vulnerabilities: 70
Public exploits: 5
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Elasticsearch Elasticsearch is affected by 70 known vulnerabilities: 2 high, 26 medium, 42 low Critical High Medium Low

Vulnerabilities (70)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153942 - Incorrect Authorization
CVE-2026-102407
CWE-863 Low
No
No
8.19.19, 9.3.8, 9.4.4 07.10.2026 SB20261007242
#VU153941 - Uncontrolled Recursion
CVE-2026-103006
CWE-674 Low
No
No
8.19.21, 9.4.6, 9.5.2 07.10.2026 SB20261007241
#VU153940 - Incorrect Authorization
CVE-2026-103007
CWE-863 Low
No
No
8.19.22, 9.4.7, 9.5.4 07.10.2026 SB20261007240
#VU153939 - Inefficient Regular Expression Complexity
CVE-2026-102408
CWE-1333 Low
No
No
8.19.22, 9.4.8, 9.5.5 07.10.2026 SB20261007240
#VU153938 - Resource exhaustion
CVE-2026-102404
CWE-400 Low
No
No
8.19.23, 9.4.8, 9.5.5 07.10.2026 SB20261007240
#VU153937 - Uncontrolled Memory Allocation
CVE-2026-103005
CWE-789 Low
No
No
8.19.23, 9.4.8, 9.5.5 07.10.2026 SB20261007240
#VU153936 - Uncontrolled Recursion
CVE-2026-103008
CWE-674 Low
No
No
8.19.23, 9.4.8, 9.5.5 07.10.2026 SB20261007240
#VU153935 - Authorization Bypass Through User-Controlled Key
CVE-2026-103009
CWE-639 Low
No
No
8.19.23, 9.4.8, 9.5.5 07.10.2026 SB20261007240
#VU153934 - Allocation of Resources Without Limits or Throttling
CVE-2026-102411
CWE-770 Low
No
No
8.19.23, 9.4.7, 9.5.3 07.10.2026 SB20261007240
#VU153933 - Uncontrolled Recursion
CVE-2026-102409
CWE-674 Low
No
No
9.4.8, 9.5.5 07.10.2026 SB20261007240


Showing elements 61 - 80 out of 70