Advisories · Technology

Elastic Fleet Server.

Every CVE that names Elastic Fleet Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-78587 CVE record

CVSS 3.1 Low

Incorrect Authorization in Fleet Server Leading to Denial of Service of Agent Upload Operations
- Elastic Fleet Server
- Broken access control
Not analysed yet 2 Sept 2026
CVE-2026-72657 CVE record

CVSS 6.5 Medium

Authorization Bypass Through User-Controlled Key in Fleet Server Leading to Information Disclosure
- Elastic Fleet Server
- Broken access control
Not analysed yet 13 Aug 2026
CVE-2026-72676 CVE record

CVSS 6.5 Medium

Improper Control of Generation of Code in Fleet Server Leading to Code Injection
- Elastic Fleet Server
- Code injection
Not analysed yet 13 Aug 2026
CVE-2026-56150 CVE record

CVSS 6.5 Medium

Allocation of Resources Without Limits or Throttling in Fleet Server Leading to Denial of Service
- Elastic Fleet Server
- Denial of service
Not analysed yet 1 Jul 2026
CVE-2024-52975 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Fleet Server sensitive information exposure via logs
- Elastic Fleet Server
- Information disclosure
Not analysed yet 23 Jan 2025
CVE-2023-31421 CVE record

CVSS 5.9 Medium

Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue
- Elastic Beats
- Elastic Agent
- Weak cryptography or TLS
Not analysed yet 26 Oct 2023
CVE-2023-46667 CVE record

CVSS 8.1 High

Fleet Server Insertion of Sensitive Information into Log File
- Elastic Fleet Server
- Information disclosure
Not analysed yet 26 Oct 2023