Login Request a demo
FS
Product
Fleet Server
by Elastic · last CVE Sep 2, 2026
5
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 2Medium 1Low 1
Severity
All severities5Critical1High2Medium1Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Fleet Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-72676
9.1
1%
Aug 13
Improper Control of Generation of Code in Fleet Server Leading to Code Injection
Affected: 8.5.0 through 8.19.19; 9.0.0 through 9.4.4; 9.5.0
CVE-2023-46667
8.1
1%
Oct 26
An issue was discovered in Fleet Server >= v8.10.0 and < v8.10.3 where Agent enrolment tokens are being inserted into the Fleet Server’s log file in plain text
Affected: 8.10.0 before 8.10.3
CVE-2026-56150
7.5
0%
Jul 1
Allocation of Resources Without Limits or Throttling in Fleet Server Leading to Denial of Service
Affected: 9.0.0 through 9.2.4; 8.0.0 through 8.19.10
CVE-2026-72657
6.5
0%
Aug 13
Authorization Bypass Through User-Controlled Key in Fleet Server Leading to Information Disclosure
Affected: 8.3.0 through 8.19.19; 9.0.0 through 9.4.4; 9.5.0
CVE-2026-78587
3.1
0%
Sep 2
Incorrect Authorization in Fleet Server Leading to Denial of Service of Agent Upload Operations
Affected: 8.0.0 through 8.19.15; 9.0.0 through 9.3.4; 9.4.0 through 9.4.1
Showing 5