Elasticsearch 8.x < 8.19.20 / 9.0.x < 9.4.5 / 9.5.x < 9.5.1 RCE (ESA-2026-114)

The version of Elasticsearch installed on the remote host is 8.x prior to 8.19.20, or 9.0.x prior to 9.4.5, or 9.5.x prior to 9.5.1. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-114 advisory. - Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine...

CVE-2026-72649

creationtimestamp| type| source ---|---|--- 2026-09-02 16:45:06+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-elastic-1 2026-09-03 11:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mumed6oays2w 2026-09-03 16:30:17+00:00| seen|...