PatchTheCVE: elasticsearchhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2026-26933: Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denhttps://patchthecve.com/cve/CVE-2026-26933.htmlhttps://patchthecve.com/cve/CVE-2026-26933.htmlWed, 17 Jun 2026 10:26:24 +0000MEDIUM 5.7: Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of Service via Input Data Manipulation (CAPEC-153). An attacker with the ability to send specially crafted, malformed network packets to a monitored network interface can trigger out-of-CVE-2026-26932: Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can lead Denial ohttps://patchthecve.com/cve/CVE-2026-26932.htmlhttps://patchthecve.com/cve/CVE-2026-26932.htmlWed, 17 Jun 2026 10:26:24 +0000MEDIUM 5.7: Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can lead Denial of Service via Input Data Manipulation (CAPEC-153). An attacker can send a specially crafted packet causing a Go runtime panic that terminates the Packetbeat process. This vulnerability requiCVE-2025-68388: Allocation of resources without limits or throttling (CWE-770) allows an unauthenticated remote attacker to cahttps://patchthecve.com/cve/CVE-2025-68388.htmlhttps://patchthecve.com/cve/CVE-2025-68388.htmlWed, 17 Jun 2026 09:59:02 +0000MEDIUM 5.3: Allocation of resources without limits or throttling (CWE-770) allows an unauthenticated remote attacker to cause excessive allocation (CAPEC-130) of memory and CPU via the integration of malicious IPv4 fragments, leading to a degradation in Packetbeat.CVE-2025-68382: Out-of-bounds read (CWE-125) allows an unauthenticated remote attacker to perform a buffer overflow (CAPEC-100https://patchthecve.com/cve/CVE-2025-68382.htmlhttps://patchthecve.com/cve/CVE-2025-68382.htmlWed, 17 Jun 2026 09:59:02 +0000MEDIUM 6.5: Out-of-bounds read (CWE-125) allows an unauthenticated remote attacker to perform a buffer overflow (CAPEC-100) via the NFS protocol dissector, leading to a denial-of-service (DoS) through a reliable process crash when handling truncated XDR-encoded RPC messages.CVE-2025-68381: Improper Bounds Check (CWE-787) in Packetbeat can allow a remote unauthenticated attacker to exploit a Buffer https://patchthecve.com/cve/CVE-2025-68381.htmlhttps://patchthecve.com/cve/CVE-2025-68381.htmlWed, 17 Jun 2026 09:59:02 +0000MEDIUM 6.5: Improper Bounds Check (CWE-787) in Packetbeat can allow a remote unauthenticated attacker to exploit a Buffer Overflow (CAPEC-100) and reliably crash the application or cause significant resource exhaustion via a single crafted UDP packet with an invalid fragment sequence number.