ROS-20260420-73-0041

Vulnerability in beats related to unchecked array indexing. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

GO-2026-4790 Metricbeat Allocates Memory with Excessive Size Value Leading to Denial of Service in github.com/elastic/beats

Metricbeat Allocates Memory with Excessive Size Value Leading to Denial of Service in github.com/elastic/beats...

GO-2026-4789 Packetbeat does not properly validate an array index in multiple protocol parser components in github.com/elastic/beats

Packetbeat does not properly validate an array index in multiple protocol parser components in github.com/elastic/beats...

ROS-20260319-73-0034

Vulnerability in beats related to writing outside buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to execute arbitrary code...

GO-2026-4360 Metricbeat affected by multiple denial of service vulnerabilities in github.com/elastic/beats

Metricbeat affected by multiple denial of service vulnerabilities in github.com/elastic/beats...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-web, cerbos-fips, flux-image-reflector-controller-fips, vault-fips, temporal-ui-server-fips, karpenter, kubernetes-csi-external-health-monitor, net-kourier-fips, prometheus-mongodb-exporter-fips, cass-operator-fips-no-pvc-delete, falco-no-driver,...

ROS-20260310-73-0024

Vulnerability in beats related to incorrect input of configuration data. The vulnerability can be exploited remotely...

ROS-20260310-73-0025

Vulnerability in beats related to unrestricted resource allocation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: gitlab-cng, cerbos-fips, ratify-fips, vault-fips, kubernetes-csi-external-health-monitor, prometheus-mongodb-exporter-fips, cass-operator-fips-no-pvc-delete, descheduler, kyverno-fips, kubernetes-csi-external-provisioner-fips, otel-cli, velero-fips, calico-fips,...

CVE-2025-61728 vulnerabilities

Vulnerabilities for packages: terraform, cerbos-fips, helm-set-status, minio, fuse-overlayfs-snapshotter, redis-operator, kubernetes-dashboard-api, azure-aad-pod-identity-mic, falco-no-driver, flux-helm-controller-fips, mattermost-fips, zitadel, kubevela-fips, kube-arangodb-fips, redka, hubble,...

CLEANSTART-2026-OJ15484 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-IY17697 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-FP29743 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-GL18398 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Multiple security vulnerabilities affect the elastic-beats-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...

CLEANSTART-2026-QD78411 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the elastic-beats-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: gitlab-cng, k9s-fips, beats-fips, ratify-fips, kyverno, boring-registry-fips, gitlab-cng-fips, datadog-agent, kyverno-notation-aws-fips, mattermost-fips, zitadel, docker-compose-fips, kyverno-fips, rancher-security-scan, neuvector-sigstore-interface-fips,...

GO-2025-4252 Buffer Overflow via Malformed Syslog Message or Malicious Tokenizer Pattern in github.com/elastic/beats

Buffer Overflow via Malformed Syslog Message or Malicious Tokenizer Pattern in github.com/elastic/beats...

Elastic Beats 7.x / 8.x < 8.19.10 / 9.x < 9.1.10 / 9.2.x < 9.2.4 Multiple Vulnerabilities (ESA_2026_01, ESA_2026_02)

The version of Elastic Beats Metricbeat or Packetbeat installed on the remote host is 7.x, 8.x prior to 8.19.10, 9.x prior to 9.1.10, or 9.2.x prior to 9.2.4. It is, therefore, affected by multiple vulnerabilities: - Improper Validation of Array Index CWE-129 and Improper Input Validation CWE-20 ...

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index via the MongoDB protocol parser. An attacker can cause buffer overflows by sending specially crafted network traffic to a monitored network interface where MongoDB protocol parsing is enabled...

Improper Validation

github.com/elastic/beats are vulnerable to Improper Validation. The vulnerability is due to insufficient validation of indexes, positions, or offsets in input handling, which allows an attacker to trigger a buffer overflow by sending a malformed Syslog message or a malicious Dissect tokenizer...