Products
IT management & monitoring
Elasticsearch / Kibana
- Last 30 days
- 8
- Actively exploited (KEV)
- 1
- All CVEs
- 296
Latest vulnerabilities
| ID | Severity | Description | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-115715 | 6.5Medium |
Elastic Elasticsearch
Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
|
0.32% |
2026-11-03
7 d ago
|
| CVE-2026-115710 | 4.2Medium |
Elastic Elasticsearch
Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosure
|
0.16% |
2026-11-03
7 d ago
|
| CVE-2026-115298 | 4.3Medium |
Elastic Elasticsearch
Incorrect Authorization in Elasticsearch Leading to Information Disclosure
|
0.22% |
2026-11-03
7 d ago
|
| CVE-2026-115295 | 4.3Medium |
Elastic Kibana
Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure
|
0.29% |
2026-11-03
7 d ago
|
| CVE-2026-115294 | 7.3High |
Elastic Kibana
Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource Deletion
|
0.34% |
2026-11-03
7 d ago
|
| CVE-2026-115293 | 6.5Medium |
Elastic Kibana
Insertion of Sensitive Information Into Sent Data in Kibana Leading to Credential Disclosure
|
0.36% |
2026-11-03
7 d ago
|
| CVE-2026-115292 | 4.3Medium |
Elastic Kibana
Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure
|
0.24% |
2026-11-03
7 d ago
|
| CVE-2026-115290 | 7.5High |
Elastic Elasticsearch
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
|
0.41% |
2026-11-03
7 d ago
|
| CVE-2026-103009 | 7.1High |
Elastic Elasticsearch
Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information Disclosure
|
0.24% |
2026-10-06
1 mo ago
|
| CVE-2026-103008 | 6.5Medium |
Elastic Elasticsearch
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
|
0.3% |
2026-10-06
1 mo ago
|
| CVE-2026-103007 | 7.2High |
Elastic Elasticsearch
Incorrect Authorization in Elasticsearch Leading to Privilege Escalation
|
0.34% |
2026-10-06
1 mo ago
|
| CVE-2026-103006 | 6.5Medium |
Elastic Elasticsearch
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
|
0.41% |
2026-10-06
1 mo ago
|
| CVE-2026-103005 | 6.5Medium |
Elastic Elasticsearch
Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service
|
0.3% |
2026-10-06
1 mo ago
|
| CVE-2026-102412 | 6.5Medium |
Elastic Kibana
Incorrect Authorization in Kibana Leading to Sensitive Information Disclosure
|
0.31% |
2026-10-06
1 mo ago
|
| CVE-2026-102411 | 6.5Medium |
Elastic Elasticsearch
Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
|
0.3% |
2026-10-06
1 mo ago
|
| CVE-2026-102410 | 4.3Medium |
Elastic Kibana
Missing Authorization in Kibana Leading to Information Disclosure
|
0.21% |
2026-10-06
1 mo ago
|
| CVE-2026-102409 | 6.5Medium |
Elastic Elasticsearch
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
|
0.3% |
2026-10-06
1 mo ago
|
| CVE-2026-102408 | 4.3Medium |
Elastic Elasticsearch
Inefficient Regular Expression Complexity in Elasticsearch Leading to Denial of Service
|
0.34% |
2026-10-06
1 mo ago
|
| CVE-2026-102407 | 5.4Medium |
Elastic Elasticsearch
Incorrect Authorization in Elasticsearch Leading to Unauthorized Data Stream Modification
|
0.21% |
2026-10-06
1 mo ago
|
| CVE-2026-102406 | 8.8High |
Elastic Kibana
Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception
|
0.34% |
2026-10-06
1 mo ago
|
| CVE-2026-102404 | 6.5Medium |
Elastic Elasticsearch
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
|
0.3% |
2026-10-06
1 mo ago
|
| CVE-2026-94408 | 4.9Medium |
Elastic Elasticsearch
Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service
|
0.25% |
2026-09-27
1 mo ago
|
| CVE-2026-94397 | 6.5Medium |
Elastic Elasticsearch
Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service
|
0.24% |
2026-09-27
1 mo ago
|
| CVE-2026-94396 | 6.5Medium |
Elastic Elasticsearch
Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service
|
0.24% |
2026-09-27
1 mo ago
|
| CVE-2026-94400 | 6.5Medium |
Elastic Kibana
Uncontrolled Resource Consumption in Kibana Leading to denial of service
|
0.24% |
2026-09-27
1 mo ago
|
| CVE-2026-94399 | 6.5Medium |
Elastic Elasticsearch
Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service
|
0.24% |
2026-09-27
1 mo ago
|
| CVE-2026-94398 | 6.5Medium |
Elastic Elasticsearch
Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service
|
0.24% |
2026-09-27
1 mo ago
|
| CVE-2026-82300 | 6.5Medium |
Elastic Elasticsearch
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
|
0.24% |
2026-09-27
1 mo ago
|
| CVE-2026-82294 | 6.5Medium |
Elastic Elasticsearch
Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
|
0.24% |
2026-09-27
1 mo ago
|
| CVE-2026-78582 | 6.5Medium |
Elastic Kibana
Missing Authorization in Kibana Leading to Unauthorized Deletion of Data
|
0.19% |
2026-09-27
1 mo ago
|