Elastic Elasticsearch vulnerabilities
91 published CVEs name Elastic Elasticsearch among the affected products.
- Published CVEs
- 91
- Last 12 months
- 51
- Critical
- 0
- Known exploited
- 0
Critical 0High 12Medium 77Low 2Not scored 0
CVEs per yearBy the year they were published
- 20185
- 20193
- 20204
- 20218
- 20222
- 20235
- 20248
- 20258
- 202648
Newest CVEs
- CVE-2026-115715
Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
Elastic · Elasticsearch
Medium6.5 - CVE-2026-115710
Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosure
Elastic · Elasticsearch
Medium4.2 - CVE-2026-115298
Incorrect Authorization in Elasticsearch Leading to Information Disclosure
Elastic · Elasticsearch
Medium4.3 - CVE-2026-115290
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
Elastic · Elasticsearch
High7.5 - CVE-2026-103009
Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information Disclosure
Elastic · Elasticsearch
High7.1 - CVE-2026-103008
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
Elastic · Elasticsearch
Medium6.5 - CVE-2026-103007
Incorrect Authorization in Elasticsearch Leading to Privilege Escalation
Elastic · Elasticsearch
High7.2 - CVE-2026-103006
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
Elastic · Elasticsearch
Medium6.5 - CVE-2026-103005
Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service
Elastic · Elasticsearch
Medium6.5 - CVE-2026-102411
Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
Elastic · Elasticsearch
Medium6.5