Elastic vulnerabilities

396 published CVEs name Elastic among the affected products; CISA lists 1 of them as exploited in the wild.

Critical 15High 87Medium 285Low 9Not scored 0

CVEs per yearBy the year they were published

CVE-2019-7609
Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion…
Elastic · Kibana
ExploitedCritical9.8

CVE-2026-115714
Improper Certificate Validation in Elastic Docker Images Leading to Interception of TLS Connections
Elastic · Elastic Docker images
High7.4
CVE-2026-115716
Allocation of Resources Without Limits or Throttling in APM Server Leading to Denial of Service
Elastic · APM Server
Medium6.5
CVE-2026-115715
Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
Elastic · Elasticsearch
Medium6.5
CVE-2026-115710
Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosure
Elastic · Elasticsearch
Medium4.2
CVE-2026-115298
Incorrect Authorization in Elasticsearch Leading to Information Disclosure
Elastic · Elasticsearch
Medium4.3
CVE-2026-115297
NULL Pointer Dereference in Packetbeat Leading to Denial of Service
Elastic · Packetbeat
Medium6.5
CVE-2026-115295
Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure
Elastic · Kibana
Medium4.3
CVE-2026-115294
Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource Deletion
Elastic · Kibana
High7.3
CVE-2026-115293
Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure
Elastic · Kibana
Medium6.5
CVE-2026-115292
Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure
Elastic · Kibana
Medium4.3