Lucene search
+L

5 matches found

Positive Technologies
Positive Technologies
•added 2026/08/19 12:00 a.m.•5 views

PT-2026-79859

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged index creation permissions can submit a single request containing a specially crafted, malformed custom analysis definition that i...

6.5CVSS5.9AI score0.0042EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/13 8:17 p.m.•23 views

CVE-2026-72638

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged index creation permissions can submit a single request containing a specially crafted, malformed custom analysis definition that i...

6.5CVSS0.0042EPSS
SaveExploits0References1
OSV
OSV
•added 2026/08/13 7:13 p.m.•7 views

CVE-2026-72638 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged index creation permissions can submit a single request containing a specially crafted, malformed custom analysis definition that i...

6.5CVSS5.9AI score
SaveExploits0References3
Elastic
Elastic
•added 2026/08/13 10:46 a.m.•18 views

Elasticsearch 8.19.20, 9.4.5 Security Update (ESA-2026-119)

Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged index creation permissions can submit a single request...

6.5CVSS5.7AI score0.0042EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•5 views

CVE-2026-72638: Uncontrolled Recursion

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged index creation permissions can submit a single request containing a specially crafted, malformed custom analysis definition that i...

6.5CVSS5.9AI score0.0042EPSS
SaveExploits0References3
Rows per page
Query Builder