CVE-2026-72685

A flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input. Processing one such document occupies a worker thread from a bounded pool for a disproportionate amount of time, degrading the...

PT-2026-71794

Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description A flaw allows a low-privileged authenticated user with indexing permissions to submit a small document containing crafted input. Processing this document occupies a worker thread from a...