Known vulnerabilities in Fleet Server

Vendor: Elastic Stack
Software: Fleet Server
Software CPE: cpe:2.3:a:elastic_stack:fleet_server:*:*:*:*:*:*:*:*
Website: https://www.elastic.co/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fleet Server Fleet Server is affected by 5 known vulnerabilities: 1 medium, 4 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146670 - Incorrect Authorization
CVE-2026-78587		 CWE-863 Low
No
No
 8.19.16, 9.3.5, 9.4.2 02.09.2026 SB2026090227
#VU136681 - Allocation of Resources Without Limits or Throttling
CVE-2026-56150		 CWE-770 Low
No
No
 8.19.11, 9.2.5, 9.3.0 02.07.2026 SB2026070219
#VU136680 - Dependency on Vulnerable Third-Party Component
CVE-2026-32283		 CWE-1395 Medium
No
No
 8.19.15, 9.3.4, 9.4.0 02.07.2026 SB2026070218
SB2026070239
SB2026070240
and 63 more
#VU103255 - Information Exposure Through Log Files
CVE-2024-52975		 CWE-532 Low
No
No
 8.15.0 23.01.2025 SB2025012326
#VU93633 - Information Exposure Through Log Files
CVE-2023-46667		 CWE-532 Low
No
No
 8.10.3 02.07.2024 SB2024070247