Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-63143 |
|
Vulnerability in elastic (CVE-2026-63143)
vulnerability in elastic (CVE-2026-63143). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63144 |
|
Vulnerability in dos (CVE-2026-63144)
vulnerability in dos (CVE-2026-63144). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63261 |
|
Vulnerability in dos (CVE-2026-63261)
vulnerability in dos (CVE-2026-63261). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63259 |
|
Vulnerability in elastic (CVE-2026-63259)
vulnerability in elastic (CVE-2026-63259). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63142 |
|
Authorization Flaw in elastic (CVE-2026-63142)
vulnerability in elastic (CVE-2026-63142). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63260 |
|
Vulnerability in dos (CVE-2026-63260)
vulnerability in dos (CVE-2026-63260). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63145 |
|
Authorization Flaw in elastic (CVE-2026-63145)
vulnerability in elastic (CVE-2026-63145). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63263 |
|
Vulnerability in dos (CVE-2026-63263)
vulnerability in dos (CVE-2026-63263). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63262 |
|
Vulnerability in elastic (CVE-2026-63262)
vulnerability in elastic (CVE-2026-63262). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63141 |
|
Vulnerability in elastic (CVE-2026-63141)
vulnerability in elastic (CVE-2026-63141). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56147 |
|
Vulnerability in elastic (CVE-2026-56147)
vulnerability in elastic (CVE-2026-56147). Confidential information can be exposed externally.
|
| CVE-2026-63140 |
|
Vulnerability in dos (CVE-2026-63140)
vulnerability in dos (CVE-2026-63140). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63139 |
|
Vulnerability in dos (CVE-2026-63139)
vulnerability in dos (CVE-2026-63139). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-63136 |
|
Vulnerability in dos (CVE-2026-63136)
vulnerability in dos (CVE-2026-63136). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56146 |
|
Authorization Flaw in elastic (CVE-2026-56146)
vulnerability in elastic (CVE-2026-56146). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56145 |
|
Vulnerability in dos (CVE-2026-56145)
vulnerability in dos (CVE-2026-56145). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56144 |
|
Authorization Flaw in elastic (CVE-2026-56144)
vulnerability in elastic (CVE-2026-56144). Confidential information can be exposed externally.
|
| CVE-2026-49092 |
|
Authorization Flaw in elastic (CVE-2026-49092)
vulnerability in elastic (CVE-2026-49092). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-42397 |
|
Vulnerability in dos (CVE-2026-42397)
vulnerability in dos (CVE-2026-42397). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49091 |
|
Vulnerability in elastic (CVE-2026-49091)
vulnerability in elastic (CVE-2026-49091). Successful exploitation can lead to full system takeover.
|
| CVE-2026-49090 |
|
Vulnerability in elasticsearch (CVE-2026-49090)
vulnerability in elasticsearch (CVE-2026-49090). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `7.17.24, 8.15.0` or later.
|
| CVE-2026-56151 |
|
Vulnerability in dos (CVE-2026-56151)
vulnerability in dos (CVE-2026-56151). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56152 |
|
Authorization Flaw in elastic (CVE-2026-56152)
vulnerability in elastic (CVE-2026-56152). Confidential information can be exposed externally.
|
| CVE-2026-56150 |
|
Vulnerability in dos (CVE-2026-56150)
vulnerability in dos (CVE-2026-56150). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-56149 |
|
Vulnerability in elasticsearch (CVE-2026-56149)
vulnerability in elasticsearch (CVE-2026-56149). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.17, 9.3.6, 9.4.3` or later.
|
| CVE-2026-56148 |
|
Vulnerability in elasticsearch (CVE-2026-56148)
vulnerability in elasticsearch (CVE-2026-56148). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.17, 9.3.6, 9.4.3` or later.
|
| CVE-2026-49087 |
|
Vulnerability in dos (CVE-2026-49087)
vulnerability in dos (CVE-2026-49087). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49088 |
|
Vulnerability in elastic (CVE-2026-49088)
vulnerability in elastic (CVE-2026-49088). Confidential information can be exposed externally.
|
| CVE-2026-49095 |
|
Vulnerability in elk (CVE-2026-49095)
vulnerability in elk (CVE-2026-49095). Confidential information can be exposed externally. Mitigation: upgrade to `8.19.16, 9.3.5, 9.4.2` or later.
|
| CVE-2026-49093 |
|
SSRF (Server-Side Request Forgery) in elk (CVE-2026-49093)
SSRF in elk (CVE-2026-49093). Confidential information can be exposed externally. Mitigation: upgrade to `9.3.3` or later.
|
| CVE-2026-49094 |
|
Vulnerability in elk (CVE-2026-49094)
vulnerability in elk (CVE-2026-49094). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16` or later.
|
| CVE-2026-42399 |
|
Vulnerability in elk (CVE-2026-42399)
vulnerability in elk (CVE-2026-42399). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16, 9.3.5` or later.
|
| CVE-2026-42400 |
|
Vulnerability in elk (CVE-2026-42400)
vulnerability in elk (CVE-2026-42400). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16, 9.3.5, 9.4.2` or later.
|
| CVE-2026-42398 |
|
SSRF (Server-Side Request Forgery) in elk (CVE-2026-42398)
SSRF in elk (CVE-2026-42398). Confidential information can be exposed externally. Mitigation: upgrade to `9.2.8, 9.3.2` or later.
|
| CVE-2026-33464 |
|
Vulnerability in elk (CVE-2026-33464)
vulnerability in elk (CVE-2026-33464). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `9.4.2` or later.
|
| CVE-2026-42401 |
|
Cross-Site Scripting (XSS) in elk (CVE-2026-42401)
cross-site scripting in elk (CVE-2026-42401). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16, 9.4.0` or later.
|
| CVE-2026-33462 |
|
Path Traversal in elk (CVE-2026-33462)
path traversal in elk (CVE-2026-33462). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16, 9.3.5` or later.
|
| CVE-2026-33463 |
|
Vulnerability in elk (CVE-2026-33463)
vulnerability in elk (CVE-2026-33463). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `8.19.16, 9.3.5` or later.
|
| CVE-2026-33467 |
|
Vulnerability in github.com/elastic/package-registry (CVE-2026-33467)
vulnerability in github.com/elastic/package-registry (CVE-2026-33467). Data can be tampered with by attackers. Mitigation: upgrade to `1.38.0` or later.
|
| CVE-2026-33458 |
|
SSRF (Server-Side Request Forgery) in elastic (CVE-2026-33458)
SSRF in elastic (CVE-2026-33458). Confidential information can be exposed externally.
|
| CVE-2026-33459 |
|
Vulnerability in dos (CVE-2026-33459)
vulnerability in dos (CVE-2026-33459). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-33466 |
|
Path Traversal in path-traversal (CVE-2026-33466)
path traversal in path-traversal (CVE-2026-33466). Successful exploitation can lead to full system takeover.
|
| CVE-2026-4498 |
|
Vulnerability in elastic (CVE-2026-4498)
vulnerability in elastic (CVE-2026-4498). Confidential information can be exposed externally.
|
| CVE-2026-33461 |
|
Authorization Flaw in elastic (CVE-2026-33461)
vulnerability in elastic (CVE-2026-33461). Confidential information can be exposed externally.
|
| CVE-2026-33460 |
|
Authorization Flaw in elastic (CVE-2026-33460)
vulnerability in elastic (CVE-2026-33460). Risk of unauthorized operations or information disclosure.
|
| CVE-2015-1427 KEV |
|
[KEV] Vulnerability in elastic (CVE-2015-1427)
vulnerability in elastic (CVE-2015-1427). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2014-3120 KEV |
|
[KEV] Vulnerability in elastic (CVE-2014-3120)
vulnerability in elastic (CVE-2014-3120). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2019-7609 KEV |
|
[KEV] Code Injection in Elastic kibana (CVE-2019-7609)
code injection in Elastic kibana (CVE-2019-7609). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2017-11481 |
|
Cross-Site Scripting (XSS) in elastic (CVE-2017-11481)
cross-site scripting in elastic (CVE-2017-11481). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-11482 |
|
Open Redirect in elastic (CVE-2017-11482)
vulnerability in elastic (CVE-2017-11482). Risk of unauthorized operations or information disclosure.
|