E
Vendor security profile3 actively exploited CVEs
elastic
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs161
Critical1
CISA KEV3
Public exploit3
Patch rate%0
Avg. CVSS6.3
12-month vulnerability rate
1
3
1
0
1
7
3
0
28
49
46
14
CVE KEV
CVE severity distribution
161toplam CVE
Critical1 (1%)
High33 (20%)
Medium122 (76%)
Low2 (1%)
Uncertain3 (2%)
Patch and exploitation view
%0
Verified patch
%2
CISA KEV
%2
Public exploit
0Patch available
0Partial
3Workaround
0Vendor: no patch
158Unknown
Latest vulnerabilities
7.1
CVE-2026-103009
Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information Disclosure
E
Patch status unknownEPSS %0
6.5
CVE-2026-103008
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
E
Patch status unknownEPSS %0
7.2
CVE-2026-103007
Incorrect Authorization in Elasticsearch Leading to Privilege Escalation
E
Patch status unknownEPSS %0
6.5
CVE-2026-103006
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
E
Patch status unknownEPSS %0
6.5
CVE-2026-103005
Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service
E
Patch status unknownEPSS %0
6.2
CVE-2026-102413
Uncaught Exception in Elastic Endpoint Leading to Denial of Service
E
Patch status unknownEPSS %0
6.5
CVE-2026-102412
Incorrect Authorization in Kibana Leading to Sensitive Information Disclosure
E
Patch status unknownEPSS %0
6.5
CVE-2026-102411
Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
E
Patch status unknownEPSS %0
4.3
CVE-2026-102410
Missing Authorization in Kibana Leading to Information Disclosure
E
Patch status unknownEPSS %0
6.5
CVE-2026-102409
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
E
Patch status unknownEPSS %0