# Elasticsearch. Every CVE that names Elasticsearch among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-115715.md) `CVE-2026-115715` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service - [Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosure](https://agentprime.io/advisories/CVE-2026-115710.md) `CVE-2026-115710` · CVE record: Elastic Elasticsearch · CVSS 4.2 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-524 - [Incorrect Authorization in Elasticsearch Leading to Information Disclosure](https://agentprime.io/advisories/CVE-2026-115298.md) `CVE-2026-115298` · CVE record: Elastic Elasticsearch · CVSS 4.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control - [Uncontrolled Recursion in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-115290.md) `CVE-2026-115290` · CVE record: Elastic Elasticsearch · CVSS 7.5 High · Not analysed yet · Published 3 Nov 2026 · Tags: Denial of service - [Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information Disclosure](https://agentprime.io/advisories/CVE-2026-103009.md) `CVE-2026-103009` · CVE record: Elastic Elasticsearch · CVSS 7.1 High · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control - [Uncontrolled Recursion in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-103008.md) `CVE-2026-103008` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Incorrect Authorization in Elasticsearch Leading to Privilege Escalation](https://agentprime.io/advisories/CVE-2026-103007.md) `CVE-2026-103007` · CVE record: Elastic Elasticsearch · CVSS 7.2 High · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control - [Uncontrolled Recursion in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-103006.md) `CVE-2026-103006` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-103005.md) `CVE-2026-103005` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-102411.md) `CVE-2026-102411` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Uncontrolled Recursion in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-102409.md) `CVE-2026-102409` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Inefficient Regular Expression Complexity in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-102408.md) `CVE-2026-102408` · CVE record: Elastic Elasticsearch · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Incorrect Authorization in Elasticsearch Leading to Unauthorized Data Stream Modification](https://agentprime.io/advisories/CVE-2026-102407.md) `CVE-2026-102407` · CVE record: Elastic Elasticsearch · CVSS 5.4 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Broken access control - [Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-102404.md) `CVE-2026-102404` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service - [Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service](https://agentprime.io/advisories/CVE-2026-94408.md) `CVE-2026-94408` · CVE record: Elastic Elasticsearch · CVSS 4.9 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Denial of service - [Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service](https://agentprime.io/advisories/CVE-2026-94397.md) `CVE-2026-94397` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Denial of service - [Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service](https://agentprime.io/advisories/CVE-2026-94396.md) `CVE-2026-94396` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Denial of service - [Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service](https://agentprime.io/advisories/CVE-2026-94399.md) `CVE-2026-94399` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Denial of service - [Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service](https://agentprime.io/advisories/CVE-2026-94398.md) `CVE-2026-94398` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Denial of service - [Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-82300.md) `CVE-2026-82300` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Denial of service - [Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-82294.md) `CVE-2026-82294` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 26 Sept 2026 · Tags: Denial of service - [Missing Authorization in Elasticsearch Leading to Information Disclosure](https://agentprime.io/advisories/CVE-2026-78607.md) `CVE-2026-78607` · CVE record: Elastic Elasticsearch · CVSS 5.4 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Broken access control - [Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Elasticsearch Leading to Information Disclosure](https://agentprime.io/advisories/CVE-2026-78605.md) `CVE-2026-78605` · CVE record: Elastic Elasticsearch · CVSS 5.9 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: HTTP request smuggling - [Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution](https://agentprime.io/advisories/CVE-2026-72649.md) `CVE-2026-72649` · CVE record: Elastic Elasticsearch · CVSS 8.8 High · Not analysed yet · Published 1 Sept 2026 · Tags: Insecure deserialization - [Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-56143.md) `CVE-2026-56143` · CVE record: Elastic Elasticsearch · CVSS 4.9 Medium · Not analysed yet · Published 1 Sept 2026 · Tags: Denial of service - [Uncontrolled Recursion in Elasticsearch Wildcard Matching Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72636.md) `CVE-2026-72636` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Use of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inference Process](https://agentprime.io/advisories/CVE-2026-72642.md) `CVE-2026-72642` · CVE record: Elastic Elasticsearch · CVSS 8.8 High · Not analysed yet · Published 13 Aug 2026 · Tags: CWE-823 - [Memory Allocation with Excessive Size Value in Elasticsearch Highlighting Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72639.md) `CVE-2026-72639` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Uncontrolled Recursion in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72638.md) `CVE-2026-72638` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Uncontrolled Recursion in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72647.md) `CVE-2026-72647` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72645.md) `CVE-2026-72645` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72656.md) `CVE-2026-72656` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Uncontrolled Recursion in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72679.md) `CVE-2026-72679` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72678.md) `CVE-2026-72678` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72687.md) `CVE-2026-72687` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Uncontrolled Recursion in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72686.md) `CVE-2026-72686` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Inefficient Algorithmic Complexity in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72685.md) `CVE-2026-72685` · CVE record: Elastic Elasticsearch · CVSS 4.3 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72684.md) `CVE-2026-72684` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Uncontrolled Recursion in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-72683.md) `CVE-2026-72683` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Denial of service - [Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-63263.md) `CVE-2026-63263` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Denial of service - [Uncontrolled Recursion in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-63144.md) `CVE-2026-63144` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Denial of service - [Reachable Assertion in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-63140.md) `CVE-2026-63140` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Denial of service - [Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-63136.md) `CVE-2026-63136` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Denial of service - [Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-56145.md) `CVE-2026-56145` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Denial of service - [Incorrect Authorization in Elasticsearch Leading to Information Disclosure](https://agentprime.io/advisories/CVE-2026-56144.md) `CVE-2026-56144` · CVE record: Elastic Elasticsearch · CVSS 5.3 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Broken access control - [Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-49090.md) `CVE-2026-49090` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Denial of service - [Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-56149.md) `CVE-2026-56149` · CVE record: Elastic Elasticsearch · CVSS 4.9 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Denial of service - [Uncontrolled Recursion in Elasticsearch Leading to Denial of Service](https://agentprime.io/advisories/CVE-2026-56148.md) `CVE-2026-56148` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Denial of service - [Elasticsearch Remote Cluster Search Cross Cluster API Key insufficient restrictions](https://agentprime.io/advisories/CVE-2024-23445.md) `CVE-2024-23445` · CVE record: Elastic Elasticsearch · CVSS 6.5 Medium · Not analysed yet · Published 12 Jun 2024 · Tags: Information disclosure - [Elasticsearch privilege escalation](https://agentprime.io/advisories/CVE-2021-37937.md) `CVE-2021-37937` · CVE record: Elastic Elasticsearch · CVSS 5.9 Medium · Not analysed yet · Published 22 Nov 2023 · Tags: Privilege escalation - [Improper certificate validation in Elasticsearch](https://agentprime.io/advisories/CVE-2021-22138.md) `CVE-2021-22138` · CVE record: Elastic Elasticsearch · No CVSS score · Not analysed yet · Published 13 May 2021 · Tags: Weak cryptography or TLS - [Sensitive information in log files in Elasticsearch](https://agentprime.io/advisories/CVE-2018-3827.md) `CVE-2018-3827` · CVE record: Elastic Elasticsearch · No CVSS score · Not analysed yet · Published 19 Sept 2018 · Tags: Information disclosure - [Information disclosure in Elasticsearch](https://agentprime.io/advisories/CVE-2018-3826.md) `CVE-2018-3826` · CVE record: Elastic Elasticsearch · No CVSS score · Not analysed yet · Published 19 Sept 2018 · Tags: Information disclosure ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .