AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Companies

Elastic security advisories

173 advisories across Elasticsearch, Elastic

Company profile
Medium 6.5Sep 26Elasticsearch: resource exhaustionElasticsearchCVE-2026-94396no fix yetMedium 6.5Sep 26Elasticsearch: resource exhaustionElasticsearchCVE-2026-94397no fix yetMedium 6.5Sep 26Elasticsearch: resource exhaustionElasticsearchCVE-2026-94398no fix yetMedium 6.5Sep 26Elasticsearch: resource exhaustionElasticsearchCVE-2026-94399no fix yetMedium 6.5Sep 26Elastic Kibana: resource exhaustionKibanaCVE-2026-94400no fix yetMedium 4.9Sep 26Elasticsearch: resource exhaustionElasticsearchCVE-2026-94408no fix yetMedium 6.3Sep 26Elastic Kibana: insecure direct object referenceKibanaCVE-2026-72662no fix yetHigh 7.3Sep 26Elastic Kibana: privilege escalationKibanaCVE-2026-72668no fix yetMedium 6.5Sep 26Elastic Kibana: missing authorizationKibanaCVE-2026-78582no fix yetMedium 6.5Sep 26Elasticsearch: resource exhaustionElasticsearchCVE-2026-82294no fix yetMedium 6.5Sep 26Elasticsearch: resource exhaustionElasticsearchCVE-2026-82300no fix yetMedium 4.3Sep 3Elastic Kibana: improper authorizationKibanaCVE-2026-82298no fix yetMedium 6.5Sep 3Elastic Kibana: improper authorizationKibanaCVE-2026-82299no fix yetHigh 8.1Sep 3Elastic Kibana: improper authorizationKibanaCVE-2026-82302no fix yetHigh 8.1Sep 3Elastic Kibana: improper authorizationKibanaCVE-2026-78583no fix yetMedium 4.3Sep 3Elastic Kibana: code injectionKibanaCVE-2026-78593no fix yetMedium 4.3Sep 3Elastic Kibana: missing authorizationKibanaCVE-2026-78595no fix yetMedium 4.3Sep 3Elastic Kibana: missing authorizationKibanaCVE-2026-78596no fix yetMedium 4.3Sep 2Elastic Kibana: improper authorizationKibanaCVE-2026-82293no fix yetMedium 6.5Sep 2Elastic Kibana: path traversalKibanaCVE-2026-78599no fix yetLow 3.5Sep 2Elastic Eck Operator: incomplete cleanupEck OperatorCVE-2026-78600no fix yetMedium 5.5Sep 2Elastic Kibana: missing authorizationKibanaCVE-2026-78601no fix yetMedium 5.3Sep 2Elastic Maps Server: path traversalElastic Maps ServerCVE-2026-78602no fix yetHigh 7.8Sep 2Elastic Agent: insecure permissionsElastic AgentCVE-2026-78604no fix yetMedium 5.4Sep 2Elastic Eck Operator: improper authorizationEck OperatorCVE-2026-78609no fix yetMedium 6.5Sep 2Elastic Kibana: denial of serviceKibanaCVE-2026-78586no fix yetLow 3.1Sep 2Elastic Fleet Server: improper authorizationFleet ServerCVE-2026-78587no fix yetMedium 6.5Sep 2Elastic Filebeat: denial of serviceFilebeatCVE-2026-78588no fix yetHigh 7.3Sep 2Elastic Kibana: path traversalKibanaCVE-2026-78590no fix yetMedium 6.3Sep 2Elastic Kibana: path traversalKibanaCVE-2026-78591no fix yetMedium 4.9Sep 2Elastic Apm Server: denial of serviceApm ServerCVE-2026-78594no fix yetMedium 5.4Sep 2Elastic Kibana: improper authorizationKibanaCVE-2026-78598no fix yetMedium 4.3Sep 2Elastic Kibana: information disclosureKibanaCVE-2026-78584no fix yetMedium 5.4Sep 1Elasticsearch: missing authorizationElasticsearchCVE-2026-78607no fix yetMedium 6.5Sep 1Elastic Kibana: missing authorizationKibanaCVE-2026-78608no fix yetHigh 7.3Sep 1Elastic Kibana: path traversalKibanaCVE-2026-78592no fix yetMedium 4.3Sep 1Elastic Kibana: missing authorizationKibanaCVE-2026-78597no fix yetMedium 4.3Sep 1Elastic Kibana: missing authorizationKibanaCVE-2026-78603no fix yetMedium 5.9Sep 1Elasticsearch: request smugglingElasticsearchCVE-2026-78605no fix yetMedium 4.2Sep 1Elastic Kibana: improper authorizationKibanaCVE-2026-78606no fix yetMedium 6.5Sep 1Elastic Kibana: information disclosureKibanaCVE-2026-72654no fix yetMedium 6.5Sep 1Elastic Kibana: denial of serviceKibanaCVE-2026-72682no fix yetMedium 6.5Sep 1Elastic Kibana: denial of serviceKibanaCVE-2026-72628no fix yetMedium 4.3Sep 1Elastic Kibana: improper authorizationKibanaCVE-2026-72633no fix yetMedium 5.4Sep 1Elastic Kibana: improper authorizationKibanaCVE-2026-72641no fix yetMedium 6.5Sep 1Elastic Kibana: denial of serviceKibanaCVE-2026-72644no fix yetHigh 8.8Sep 1Elasticsearch: unsafe deserializationElasticsearchCVE-2026-72649no fix yetMedium 6.5Sep 1Elastic Kibana: denial of serviceKibanaCVE-2026-72652no fix yetHigh 8.3Sep 1Elastic Kibana: improper authorizationKibanaCVE-2026-63137no fix yetMedium 6.5Sep 1Elastic Kibana: information disclosureKibanaCVE-2026-63138no fix yetMedium 4.9Sep 1Elasticsearch: denial of serviceElasticsearchCVE-2026-56143no fix yetMedium 6.5Sep 1Elastic Kibana: denial of serviceKibanaCVE-2026-33465no fix yetHigh 7.2Sep 1Elastic Security: denial of serviceElastic SecurityCVE-2024-14047no fix yetMedium 4.2Aug 25Elastic Kibana: insecure direct object referenceKibanaCVE-2026-78581no fix yetMedium 6.5Aug 13Elasticsearch: denial of serviceElasticsearchCVE-2026-72684no fix yetMedium 4.3Aug 13A flaw in ElasticsearchElasticsearchCVE-2026-72685no fix yetMedium 6.5Aug 13Elasticsearch: denial of serviceElasticsearchCVE-2026-72686no fix yetMedium 6.5Aug 13Elasticsearch: denial of serviceElasticsearchCVE-2026-72687no fix yetMedium 6.5Aug 13Elastic Kibana: denial of serviceKibanaCVE-2026-72674no fix yetHigh 7.1Aug 13Elastic Kibana: missing authorizationKibanaCVE-2026-72675no fix yet

The newest 60. Each project page has the full list.

About Elastic

Elastic is a Dutch-American software company that provides a platform for enterprise search, observability, and cybersecurity. Its product enables users to search and analyze large-scale data, monitor system performance, and detect anomalies.

Elsewhere on Ibis: Acquisitions · Quarterly · Paydays · Releases · Repos · TechConf