AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

Elastic security advisories

130 advisories · 23 critical or high in 12 months · latest Sep 26

Advisories page

60 of 130 advisories

Medium 6.5Sep 26Elasticsearch: resource exhaustionCVE-2026-94396no fix yetMedium 6.5Sep 26Elasticsearch: resource exhaustionCVE-2026-94397no fix yetMedium 6.5Sep 26Elasticsearch: resource exhaustionCVE-2026-94398no fix yetMedium 6.5Sep 26Elasticsearch: resource exhaustionCVE-2026-94399no fix yetMedium 6.5Sep 26Elastic Kibana: resource exhaustionCVE-2026-94400no fix yetMedium 4.9Sep 26Elasticsearch: resource exhaustionCVE-2026-94408no fix yetMedium 6.3Sep 26Elastic Kibana: insecure direct object referenceCVE-2026-72662no fix yetHigh 7.3Sep 26Elastic Kibana: privilege escalationCVE-2026-72668no fix yetMedium 6.5Sep 26Elastic Kibana: missing authorizationCVE-2026-78582no fix yetMedium 6.5Sep 26Elasticsearch: resource exhaustionCVE-2026-82294no fix yetMedium 6.5Sep 26Elasticsearch: resource exhaustionCVE-2026-82300no fix yetMedium 4.3Sep 3Elastic Kibana: improper authorizationCVE-2026-82298no fix yetMedium 6.5Sep 3Elastic Kibana: improper authorizationCVE-2026-82299no fix yetHigh 8.1Sep 3Elastic Kibana: improper authorizationCVE-2026-82302no fix yetHigh 8.1Sep 3Elastic Kibana: improper authorizationCVE-2026-78583no fix yetMedium 4.3Sep 3Elastic Kibana: code injectionCVE-2026-78593no fix yetMedium 4.3Sep 3Elastic Kibana: missing authorizationCVE-2026-78595no fix yetMedium 4.3Sep 3Elastic Kibana: missing authorizationCVE-2026-78596no fix yetMedium 4.3Sep 2Elastic Kibana: improper authorizationCVE-2026-82293no fix yetMedium 6.5Sep 2Elastic Kibana: path traversalCVE-2026-78599no fix yetLow 3.5Sep 2Elastic Eck Operator: incomplete cleanupCVE-2026-78600no fix yetMedium 5.5Sep 2Elastic Kibana: missing authorizationCVE-2026-78601no fix yetMedium 5.3Sep 2Elastic Maps Server: path traversalCVE-2026-78602no fix yetHigh 7.8Sep 2Elastic Agent: insecure permissionsCVE-2026-78604no fix yetMedium 5.4Sep 2Elastic Eck Operator: improper authorizationCVE-2026-78609no fix yetMedium 6.5Sep 2Elastic Kibana: denial of serviceCVE-2026-78586no fix yetLow 3.1Sep 2Elastic Fleet Server: improper authorizationCVE-2026-78587no fix yetMedium 6.5Sep 2Elastic Filebeat: denial of serviceCVE-2026-78588no fix yetHigh 7.3Sep 2Elastic Kibana: path traversalCVE-2026-78590no fix yetMedium 6.3Sep 2Elastic Kibana: path traversalCVE-2026-78591no fix yetMedium 4.9Sep 2Elastic Apm Server: denial of serviceCVE-2026-78594no fix yetMedium 5.4Sep 2Elastic Kibana: improper authorizationCVE-2026-78598no fix yetMedium 4.3Sep 2Elastic Kibana: information disclosureCVE-2026-78584no fix yetMedium 5.4Sep 1Elasticsearch: missing authorizationCVE-2026-78607no fix yetMedium 6.5Sep 1Elastic Kibana: missing authorizationCVE-2026-78608no fix yetHigh 7.3Sep 1Elastic Kibana: path traversalCVE-2026-78592no fix yetMedium 4.3Sep 1Elastic Kibana: missing authorizationCVE-2026-78597no fix yetMedium 4.3Sep 1Elastic Kibana: missing authorizationCVE-2026-78603no fix yetMedium 5.9Sep 1Elasticsearch: request smugglingCVE-2026-78605no fix yetMedium 4.2Sep 1Elastic Kibana: improper authorizationCVE-2026-78606no fix yetMedium 6.5Sep 1Elastic Kibana: information disclosureCVE-2026-72654no fix yetMedium 6.5Sep 1Elastic Kibana: denial of serviceCVE-2026-72682no fix yetMedium 6.5Sep 1Elastic Kibana: denial of serviceCVE-2026-72628no fix yetMedium 4.3Sep 1Elastic Kibana: improper authorizationCVE-2026-72633no fix yetMedium 5.4Sep 1Elastic Kibana: improper authorizationCVE-2026-72641no fix yetMedium 6.5Sep 1Elastic Kibana: denial of serviceCVE-2026-72644no fix yetHigh 8.8Sep 1Elasticsearch: unsafe deserializationCVE-2026-72649no fix yetMedium 6.5Sep 1Elastic Kibana: denial of serviceCVE-2026-72652no fix yetHigh 8.3Sep 1Elastic Kibana: improper authorizationCVE-2026-63137no fix yetMedium 6.5Sep 1Elastic Kibana: information disclosureCVE-2026-63138no fix yetMedium 4.9Sep 1Elasticsearch: denial of serviceCVE-2026-56143no fix yetMedium 6.5Sep 1Elastic Kibana: denial of serviceCVE-2026-33465no fix yetHigh 7.2Sep 1Elastic Security: denial of serviceCVE-2024-14047no fix yetMedium 4.2Aug 25Elastic Kibana: insecure direct object referenceCVE-2026-78581no fix yetMedium 6.5Aug 13Elasticsearch: denial of serviceCVE-2026-72684no fix yetMedium 4.3Aug 13A flaw in ElasticsearchCVE-2026-72685no fix yetMedium 6.5Aug 13Elasticsearch: denial of serviceCVE-2026-72686no fix yetMedium 6.5Aug 13Elasticsearch: denial of serviceCVE-2026-72687no fix yetMedium 6.5Aug 13Elastic Kibana: denial of serviceCVE-2026-72674no fix yetHigh 7.1Aug 13Elastic Kibana: missing authorizationCVE-2026-72675no fix yet
About Elastic

Security advisories Elastic publishes for its own products.

www.elastic.co/community/securityElastic

Elastic elsewhere on Ibis: Acquisitions · Quarterly · Paydays · Releases · Repos · TechConf