342412 matches found
Elasticsearch 8.19.20, 9.4.5 Security Update (ESA-2026-77)
Inefficient Algorithmic Complexity in Elasticsearch Leading to Denial of Service A flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input. Processing one such document occupies a worker...
Elasticsearch 8.19.20, 9.4.5 Security Update (ESA-2026-133)
Uncontrolled Recursion in Elasticsearch Wildcard Matching Leading to Denial of Service Description: Uncontrolled Recursion CWE-674 in the Elasticsearch wildcard matching helper can lead to a denial of service via Excessive Allocation CAPEC-130. The matcher used to resolve wildcard patterns agains...
Elasticsearch 8.19.20, 9.4.5 Security Update (ESA-2026-119)
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. An authenticated user holding only low-privileged index creation permissions can submit a single request...
Elasticsearch 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-118)
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads CAPEC-230. An authenticated user holding only read privileges on a single index can submit one specially...
Elasticsearch 8.19.19, 9.3.8, 9.4.4 Security Update (ESA-2026-75)
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint to submit a request that causes a self-referential data structure to be created. When a specific...
Elasticsearch 8.18.0, 9.0.0 Security Update (ESA-2026-111)
Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service Memory Allocation with Excessive Size Value CWE-789 in the ES|QL query processing of Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. An authenticated user able to submit ES|QL...
Elastic Cloud on Kubernetes 3.5.0 Security Update (ESA-2026-113)
Cleartext Storage of Sensitive Information in an Environment Variable in Elastic Cloud on Kubernetes Leading to Information Disclosure Cleartext Storage of Sensitive Information in an Environment Variable CWE-526 in Elastic Cloud on Kubernetes ECK can lead to information disclosure via Retrieve...
Kibana 8.19.20, 9.3.5, 9.4.2 Security Update (ESA-2026-136)
Uncaught Exception in Kibana Cases Leading to Denial of Service Uncaught Exception CWE-248 in Kibana Cases can lead to denial of service via Input Data Manipulation CAPEC-153. Malformed link syntax stored in a case comment was not rejected or sanitized when the comment was later formatted for...
CVE-2026-59501
CWE-284: Improper Access Control...
CVE-2026-59504
CWE-602: Client-Side Enforcement of Server-Side Security...
CVE-2026-59505
CWE-284: Improper Access Control...
CVE-2026-59506
CWE-306: Missing Authentication for Critical Function...
CVE-2026-59503
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor...
CVE-2026-59502
CWE-203: Observable Discrepancy...
CVE-2026-59500
CWE-287: Improper Authentication...
CVE-2026-59499
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor...
EUVD-2026-57774
CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control...
CVE-2026-59507
Technical details about CVE-2026-59507 are not publicly available in the provided documents. Monitor for updates.