PatchTheCVECVEs published by Elastic
CVEs published by Elastic (CVE Numbering Authority). 12 tracked.
- CVE-2026-63260 MEDIUM 6.5 UPGRADE Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (
- CVE-2026-63261 MEDIUM 6.5 UPGRADE Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (
- CVE-2026-63263 MEDIUM 6.5 UPGRADE Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Dat
- CVE-2026-63144 MEDIUM 6.5 UPGRADE Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search
- CVE-2026-63141 MEDIUM 6.3 UPGRADE Missing Authorization (CWE-862) in Kibana allows an authenticated user to access and modify Cloud Connect conf
- CVE-2026-63142 MEDIUM 5.0 UPGRADE Incomplete List of Disallowed Inputs (CWE-184) in Kibana can allow an authenticated attacker with access to th
- CVE-2026-63143 MEDIUM 4.3 UPGRADE Missing Authorization (CWE-862) in Kibana can lead to unauthorized information disclosure via Privilege Abuse
- CVE-2026-63145 MEDIUM 4.3 UPGRADE Incorrect Authorization (CWE-863) in Kibana can lead to integrity compromise of Machine Learning audit and not
- CVE-2026-63259 MEDIUM 4.3 UPGRADE Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via us
- CVE-2026-63262 MEDIUM 4.3 UPGRADE Missing Authorization (CWE-862) in Kibana can lead to unauthorized cross-space information disclosure via user
- CVE-2026-72663 MEDIUM 6.5 UPGRADE Inefficient Algorithmic Complexity (CWE-407) in Kibana can lead to denial of service via Input Data Manipulati
- CVE-2026-72653 MEDIUM 6.5 UPGRADE Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Exc