CVE-2026-102413
Uncaught Exception in Elastic Endpoint Leading to Denial of Service
CVSS score
6.2
EPSS probability
%0.1
Risk score
0.0
Published
6 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
7.5
CVE-2019-7609 Actively exploited
kibana: Arbitrary code execution flaw in the Timelion visualizer
RH
Patch verifiedEPSS %95
6.8
CVE-2015-1427 Actively exploited
elasticsearch: remote code execution via Groovy sandbox bypass
RH
Patch verifiedEPSS %100
6.8
CVE-2014-3120 Actively exploited
elasticsearch: remote code execution flaw via dynamic scripting
RH
Patch verifiedEPSS %89
9.8
CVE-2026-33466
Path traversal in Elastic Logstash
E
Patch status unknownEPSS %1
8.8
CVE-2026-72649
Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution
E
Patch status unknownEPSS %1
8.8
CVE-2026-72642
Use of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inference Process
E
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-102413"