Elastic Fleet Server vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20251
3. 20264

Newest CVEs

• CVE-2026-78587

  Incorrect Authorization in Fleet Server Leading to Denial of Service of Agent Upload Operations

  Elastic · Fleet Server

  Low3.1
• CVE-2026-72657

  Authorization Bypass Through User-Controlled Key in Fleet Server Leading to Information Disclosure

  Elastic · Fleet Server

  Medium6.5
• CVE-2026-72676

  Improper Control of Generation of Code in Fleet Server Leading to Code Injection

  Elastic · Fleet Server

  Medium6.5
• CVE-2026-56150

  Allocation of Resources Without Limits or Throttling in Fleet Server Leading to Denial of Service

  Elastic · Fleet Server

  Medium6.5
• CVE-2024-52975

  Fleet Server sensitive information exposure via logs

  Elastic · Fleet Server

  Critical9.0
• CVE-2023-31421

  Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue

  Elastic · Beats

  Medium5.9
• CVE-2023-46667

  Fleet Server Insertion of Sensitive Information into Log File

  Elastic · Fleet Server

  High8.1