EL
Vendor
Elastic
398
CVEs
3
On KEV
14
New 30D
Products
EL9.8
Elasticsearch
Database
95 CVEs2 on KEV10 new
KI10.0
Kibana
Elastic
200 CVEs1 on KEV3 new
EA6.2
Elastic Agent and Elastic Defend
Elastic
1 CVEs0 on KEV1 new
LO9.8
Logstash
Elastic
13 CVEs0 on KEV0 new
EC9.8
Elastic Cloud Enterprise
Elastic
9 CVEs0 on KEV0 new
XP9.8
X-pack
Elastic
9 CVEs0 on KEV0 new
EA7.8
Elastic Agent
Elastic
6 CVEs0 on KEV0 new
EC7.5
Elastic Cloud ON Kubernetes
Elastic
6 CVEs0 on KEV0 new
ES7.8
Endpoint Security
Elastic
6 CVEs0 on KEV0 new
ES8.8
Enterprise Search
Elastic
5 CVEs0 on KEV0 new
FS9.1
Fleet Server
Elastic
5 CVEs0 on KEV0 new
AS7.5
Apm Server
Elastic
4 CVEs0 on KEV0 new
EO6.5
Eck Operator
Elastic
4 CVEs0 on KEV0 new
AA7.8
Apm Agent
Elastic
3 CVEs0 on KEV0 new
FI6.5
Filebeat
Elastic
3 CVEs0 on KEV0 new
EA7.5
Elastic App Search
Elastic
2 CVEs0 on KEV0 new
EB7.5
Elastic Beats
Elastic
2 CVEs0 on KEV0 new
EX6.1
Elasticsearch X-pack
Elastic
2 CVEs0 on KEV0 new
EN7.8
Endgame
Elastic
2 CVEs0 on KEV0 new
KX6.1
Kibana X-pack
Elastic
2 CVEs0 on KEV0 new
LX6.1
Logstash X-pack
Elastic
2 CVEs0 on KEV0 new
WI7.5
Winlogbeat
Elastic
2 CVEs0 on KEV0 new
AP7.4
Apm-agent-ruby
Elastic
1 CVEs0 on KEV0 new
AJ7.8
Apm Java Agent
Elastic
1 CVEs0 on KEV0 new
AN4.3
Apm .net Agent
Elastic
1 CVEs0 on KEV0 new
AR8.1
Azure Repository
Elastic
1 CVEs0 on KEV0 new
EF7.5
Elastic Fleet Server
Elastic
1 CVEs0 on KEV0 new
EM5.3
Elastic Maps Server
Elastic
1 CVEs0 on KEV0 new
EP5.9
Elastic Package Registry
Elastic
1 CVEs0 on KEV0 new
ES7.1
Elastic Security
Elastic
1 CVEs0 on KEV0 new
ES6.5
Elastic Sharepoint Online Python Connector
Elastic
1 CVEs0 on KEV0 new
EN9.1
Endpoint
Elastic
1 CVEs0 on KEV0 new
KR8.8
Kibana Reporting
Elastic
1 CVEs0 on KEV0 new
MS5.3
Maps Server
Elastic
1 CVEs0 on KEV0 new
ME5.7
Metricbeat
Elastic
1 CVEs0 on KEV0 new
ND6.5
Network Drive Connector
Elastic
1 CVEs0 on KEV0 new
PA5.7
Packetbeat
Elastic
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-103009 | EL Elasticsearch Elastic | 7.1 | Oct 6 | Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information Disclosure |
| CVE-2026-103008 | EL Elasticsearch Elastic | 6.5 | Oct 6 | Uncontrolled Recursion in Elasticsearch Leading to Denial of Service |
| CVE-2026-103007 | EL Elasticsearch Elastic | 7.2 | Oct 6 | Incorrect Authorization in Elasticsearch Leading to Privilege Escalation |
| CVE-2026-103006 | EL Elasticsearch Elastic | 6.5 | Oct 6 | Uncontrolled Recursion in Elasticsearch Leading to Denial of Service |
| CVE-2026-103005 | EL Elasticsearch Elastic | 6.5 | Oct 6 | Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service |
| CVE-2026-102413 | EA Elastic Agent and Elastic Defend Elastic | 6.2 | Oct 6 | Uncaught Exception in Elastic Endpoint Leading to Denial of Service |
| CVE-2026-102412 | KI Kibana Elastic | 6.5 | Oct 6 | Incorrect Authorization in Kibana Leading to Sensitive Information Disclosure |
| CVE-2026-102411 | EL Elasticsearch Elastic | 6.5 | Oct 6 | Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service |
| CVE-2026-102410 | KI Kibana Elastic | 4.3 | Oct 6 | Missing Authorization in Kibana Leading to Information Disclosure |
| CVE-2026-102409 | EL Elasticsearch Elastic | 6.5 | Oct 6 | Uncontrolled Recursion in Elasticsearch Leading to Denial of Service |
| CVE-2026-102408 | EL Elasticsearch Elastic | 4.3 | Oct 6 | Inefficient Regular Expression Complexity in Elasticsearch Leading to Denial of Service |
| CVE-2026-102407 | EL Elasticsearch Elastic | 5.4 | Oct 6 | Incorrect Authorization in Elasticsearch Leading to Unauthorized Data Stream Modification |
| CVE-2026-102406 | KI Kibana Elastic | 8.8 | Oct 6 | Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception |
| CVE-2026-102404 | EL Elasticsearch Elastic | 6.5 | Oct 6 | Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service |
| CVE-2026-94408 | EL Elasticsearch Elastic | 4.9 | Sep 26 | Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service |
| CVE-2026-94397 | EL Elasticsearch Elastic | 6.5 | Sep 26 | Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service |
| CVE-2026-94396 | EL Elasticsearch Elastic | 6.5 | Sep 26 | Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service |
| CVE-2026-94400 | KI Kibana Elastic | 6.5 | Sep 26 | Uncontrolled Resource Consumption in Kibana Leading to denial of service |
| CVE-2026-94399 | EL Elasticsearch Elastic | 6.5 | Sep 26 | Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service |
| CVE-2026-94398 | EL Elasticsearch Elastic | 6.5 | Sep 26 | Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service |
| CVE-2026-82300 | EL Elasticsearch Elastic | 6.5 | Sep 26 | Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service |
| CVE-2026-82294 | EL Elasticsearch Elastic | 6.5 | Sep 26 | Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service |
| CVE-2026-78582 | KI Kibana Elastic | 6.5 | Sep 26 | Missing Authorization in Kibana Leading to Unauthorized Deletion of Data |
| CVE-2026-72662 | KI Kibana Elastic | 6.3 | Sep 26 | Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data |
| CVE-2026-72668 | KI Kibana Elastic | 7.3 | Sep 26 | Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Privilege Escalation |
| CVE-2026-82302 | KI Kibana Elastic | 8.1 | Sep 3 | Incorrect Authorization in Kibana Leading to Unauthorized Configuration Modification |
| CVE-2026-82299 | KI Kibana Elastic | 6.5 | Sep 3 | Incorrect Authorization in Kibana Leading to Information Disclosure |
| CVE-2026-82298 | KI Kibana Elastic | 4.3 | Sep 3 | Incorrect Authorization in Kibana Leading to Denial of Service |
| CVE-2026-78596 | KI Kibana Elastic | 4.3 | Sep 3 | Missing Authorization in Kibana Leading to Unauthorized Cross-Space Write Operations |
| CVE-2026-78595 | KI Kibana Elastic | 4.3 | Sep 3 | Missing Authorization in Kibana Fleet Plugin Leading to Cross-Space Agent Data Disclosure |
| CVE-2026-78593 | KI Kibana Elastic | 4.3 | Sep 3 | Improper Control of Generation of Code in Kibana Leading to Privilege Escalation |
| CVE-2026-78583 | KI Kibana Elastic | 8.1 | Sep 3 | Incorrect Authorization in Kibana Leading to Privilege Escalation |
| CVE-2026-82293 | KI Kibana Elastic | 4.3 | Sep 2 | Incorrect Authorization in Kibana Leading to Unauthorized Resource Consumption |
| CVE-2026-78588 | FI Filebeat Elastic | 6.5 | Sep 2 | Allocation of Resources Without Limits or Throttling in Filebeat Leading to Denial of Service |
| CVE-2026-78587 | FS Fleet Server Elastic | 3.1 | Sep 2 | Incorrect Authorization in Fleet Server Leading to Denial of Service of Agent Upload Operations |
| CVE-2026-78586 | KI Kibana Elastic | 6.5 | Sep 2 | Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service |
| CVE-2026-78584 | KI Kibana Elastic | 4.3 | Sep 2 | Observable Response Discrepancy in Kibana Leading to Cross-Space Information Disclosure |
| CVE-2026-78591 | KI Kibana Elastic | 6.3 | Sep 2 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Kibana Leading to Unauthorized Resource Deletion |
| CVE-2026-78590 | KI Kibana Elastic | 7.3 | Sep 2 | Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources |
| CVE-2026-78599 | KI Kibana Elastic | 6.5 | Sep 2 | Stored Path Traversal in Kibana Leading to Unauthorized Deletion of Internal Resources |
| CVE-2026-78598 | KI Kibana Elastic | 5.4 | Sep 2 | Incorrect Authorization in Kibana Leading to Unauthorized Cross-Space Exposure of Machine Learning Job Data |
| CVE-2026-78594 | AS Apm Server Elastic | 4.9 | Sep 2 | Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service |
| CVE-2026-78604 | EA Elastic Agent Elastic | 7.8 | Sep 2 | Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM |
| CVE-2026-78602 | EM Elastic Maps Server Elastic | 5.3 | Sep 2 | Improper Limitation of a Pathname to a Restricted Directory in Elastic Maps Server Leading to Unauthorized File Disclosure |
| CVE-2026-78601 | KI Kibana Elastic | 5.5 | Sep 2 | Missing Authorization in Kibana Leading to Unauthorized Elasticsearch Index Data Exposure |
| CVE-2026-78600 | EO Eck Operator Elastic | 3.5 | Sep 2 | Incomplete Cleanup in Elastic Cloud on Kubernetes Leading to Unauthorized Cross-Namespace Credential Retention |
| CVE-2026-78609 | EO Eck Operator Elastic | 5.4 | Sep 2 | Incorrect Authorization in Elastic Cloud on Kubernetes Leading to Unauthorized Modification of Data |
| CVE-2026-63138 | KI Kibana Elastic | 6.5 | Sep 1 | Improper Neutralization of Special Elements in Data Query Logic in Kibana Leading to Information Disclosure |
| CVE-2026-78597 | KI Kibana Elastic | 4.3 | Sep 1 | Missing Authorization in Kibana Entity Store Leading to Unauthorized API Key Creation |
| CVE-2026-78592 | KI Kibana Elastic | 7.3 | Sep 1 | Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources |
| CVE-2026-78606 | KI Kibana Elastic | 4.2 | Sep 1 | Incorrect Authorization in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data |
| CVE-2026-78603 | KI Kibana Elastic | 4.3 | Sep 1 | Missing Authorization in Kibana Leading to Unauthorized Disclosure of Fleet Deployment Metadata |
| CVE-2026-78607 | EL Elasticsearch Elastic | 7.1 | Sep 1 | Missing Authorization in Elasticsearch Leading to Information Disclosure |
| CVE-2026-78608 | KI Kibana Elastic | 6.5 | Sep 1 | Missing Authorization in Kibana Leading to Information Disclosure |
| CVE-2026-78605 | EL Elasticsearch Elastic | 5.9 | Sep 1 | Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Elasticsearch Leading to Information Disclosure |
| CVE-2026-72654 | KI Kibana Elastic | 6.5 | Sep 1 | Execution with Unnecessary Privileges in Kibana Leading to Information Disclosure |
| CVE-2026-72633 | KI Kibana Elastic | 4.3 | Sep 1 | Incorrect Authorization in Kibana Leading to Unauthorized Disabling of Privilege Monitoring |
| CVE-2026-72641 | KI Kibana Elastic | 5.4 | Sep 1 | Incorrect Authorization in Kibana Leading to Unauthorized Modification of Data |
| CVE-2026-72628 | KI Kibana Elastic | 6.5 | Sep 1 | Improper Handling of Highly Compressed Data in Kibana Leading to Denial of Service |
| CVE-2026-72644 | KI Kibana Elastic | 6.5 | Sep 1 | Uncaught Exception in Kibana Leading to Denial of Service |
