Login Request a demo
EL
Vendor
Elastic
40 products with CVEs on record
424
CVEs
3
On KEV
21
New 30D
Products
EL
Elasticsearch
Database
9.8
95 CVEs2 on KEV10 new
EC
Elastic Cloud Enterprise
Elastic
9.8
16 CVEs0 on KEV7 new
KI
Kibana
Elastic
10.0
203 CVEs1 on KEV3 new
EA
Elastic Agent and Elastic Defend
Elastic
7.1
2 CVEs0 on KEV1 new
LO
Logstash
Elastic
9.8
14 CVEs0 on KEV0 new
XP
X-pack
Elastic
9.8
9 CVEs0 on KEV0 new
AS
Apm Server
Elastic
7.5
6 CVEs0 on KEV0 new
EA
Elastic Agent
Elastic
7.8
6 CVEs0 on KEV0 new
EC
Elastic Cloud ON Kubernetes
Elastic
7.5
6 CVEs0 on KEV0 new
ES
Endpoint Security
Elastic
7.8
6 CVEs0 on KEV0 new
FS
Fleet Server
Elastic
9.1
6 CVEs0 on KEV0 new
PA
Packetbeat
Elastic
7.5
6 CVEs0 on KEV0 new
ES
Enterprise Search
Elastic
8.8
5 CVEs0 on KEV0 new
EO
Eck Operator
Elastic
6.5
4 CVEs0 on KEV0 new
AA
Apm Agent
Elastic
7.8
3 CVEs0 on KEV0 new
FI
Filebeat
Elastic
6.5
3 CVEs0 on KEV0 new
EA
Elastic App Search
Elastic
7.5
2 CVEs0 on KEV0 new
EB
Elastic Beats
Elastic
7.5
2 CVEs0 on KEV0 new
EC
Elastic Cloud Enterprise (ECE)
Elastic
8.8
2 CVEs0 on KEV0 new
ED
Elastic Defend
Elastic
6.5
2 CVEs0 on KEV0 new
EX
Elasticsearch X-pack
Elastic
6.1
2 CVEs0 on KEV0 new
EN
Endgame
Elastic
7.8
2 CVEs0 on KEV0 new
KX
Kibana X-pack
Elastic
6.1
2 CVEs0 on KEV0 new
LX
Logstash X-pack
Elastic
6.1
2 CVEs0 on KEV0 new
ME
Metricbeat
Elastic
7.5
2 CVEs0 on KEV0 new
WI
Winlogbeat
Elastic
7.5
2 CVEs0 on KEV0 new
AP
Apm-agent-ruby
Elastic
7.4
1 CVEs0 on KEV0 new
AJ
Apm Java Agent
Elastic
7.8
1 CVEs0 on KEV0 new
AN
Apm .net Agent
Elastic
4.3
1 CVEs0 on KEV0 new
AR
Azure Repository
Elastic
8.1
1 CVEs0 on KEV0 new
BE
Beats
Elastic
7.0
1 CVEs0 on KEV0 new
EF
Elastic Fleet Server
Elastic
7.5
1 CVEs0 on KEV0 new
EM
Elastic Maps Server
Elastic
5.3
1 CVEs0 on KEV0 new
EP
Elastic Package Registry
Elastic
5.9
1 CVEs0 on KEV0 new
ES
Elastic Security
Elastic
7.1
1 CVEs0 on KEV0 new
ES
Elastic Sharepoint Online Python Connector
Elastic
6.5
1 CVEs0 on KEV0 new
EN
Endpoint
Elastic
9.1
1 CVEs0 on KEV0 new
KR
Kibana Reporting
Elastic
8.8
1 CVEs0 on KEV0 new
MS
Maps Server
Elastic
5.3
1 CVEs0 on KEV0 new
ND
Network Drive Connector
Elastic
6.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-115713
New
EC
Elastic Cloud Enterprise
Elastic
7.5–Oct 29Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Modification
CVE-2026-115712
New
EC
Elastic Cloud Enterprise
Elastic
4.3–Oct 29Incorrect Authorization in Elastic Cloud Enterprise (ECE) Leading to Unauthorized Modification of Platform Settings
CVE-2026-115711
New
EC
Elastic Cloud Enterprise
Elastic
6.4–Oct 29Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Credential Disclosure
CVE-2026-115709
New
EC
Elastic Cloud Enterprise
Elastic
8.2–Oct 29Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Loss
CVE-2026-115708
New
EC
Elastic Cloud Enterprise
Elastic
7.2–Oct 29Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication Bypass
CVE-2026-115707
New
EC
Elastic Cloud Enterprise
Elastic
6.4–Oct 29Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation
CVE-2026-115706
New
EC
Elastic Cloud Enterprise
Elastic
6.8–Oct 29Authorization Bypass Through User-Controlled Key in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation
CVE-2026-103009
EL
Elasticsearch
Elastic
7.1
0%
Oct 6Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information Disclosure
CVE-2026-103008
EL
Elasticsearch
Elastic
6.5
0%
Oct 6Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
CVE-2026-103007
EL
Elasticsearch
Elastic
7.2
0%
Oct 6Incorrect Authorization in Elasticsearch Leading to Privilege Escalation
CVE-2026-103006
EL
Elasticsearch
Elastic
6.5
0%
Oct 6Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
CVE-2026-103005
EL
Elasticsearch
Elastic
6.5
0%
Oct 6Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service
CVE-2026-102413
EA
Elastic Agent and Elastic Defend
Elastic
6.2
0%
Oct 6Uncaught Exception in Elastic Endpoint Leading to Denial of Service
CVE-2026-102412
KI
Kibana
Elastic
6.5
0%
Oct 6Incorrect Authorization in Kibana Leading to Sensitive Information Disclosure
CVE-2026-102411
EL
Elasticsearch
Elastic
6.5
0%
Oct 6Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
CVE-2026-102410
KI
Kibana
Elastic
4.3
0%
Oct 6Missing Authorization in Kibana Leading to Information Disclosure
CVE-2026-102409
EL
Elasticsearch
Elastic
6.5
0%
Oct 6Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
CVE-2026-102408
EL
Elasticsearch
Elastic
4.3
0%
Oct 6Inefficient Regular Expression Complexity in Elasticsearch Leading to Denial of Service
CVE-2026-102407
EL
Elasticsearch
Elastic
5.4
0%
Oct 6Incorrect Authorization in Elasticsearch Leading to Unauthorized Data Stream Modification
CVE-2026-102406
KI
Kibana
Elastic
8.8
0%
Oct 6Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception
CVE-2026-102404
EL
Elasticsearch
Elastic
6.5
0%
Oct 6Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
CVE-2026-94408
EL
Elasticsearch
Elastic
4.9
0%
Sep 26Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service
CVE-2026-94397
EL
Elasticsearch
Elastic
6.5
0%
Sep 26Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service
CVE-2026-94396
EL
Elasticsearch
Elastic
6.5
0%
Sep 26Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service
CVE-2026-94400
KI
Kibana
Elastic
6.5
0%
Sep 26Uncontrolled Resource Consumption in Kibana Leading to denial of service
CVE-2026-94399
EL
Elasticsearch
Elastic
6.5
0%
Sep 26Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service
CVE-2026-94398
EL
Elasticsearch
Elastic
6.5
0%
Sep 26Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service
CVE-2026-82300
EL
Elasticsearch
Elastic
6.5
0%
Sep 26Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
CVE-2026-82294
EL
Elasticsearch
Elastic
6.5
0%
Sep 26Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
CVE-2026-78582
KI
Kibana
Elastic
6.5
0%
Sep 26Missing Authorization in Kibana Leading to Unauthorized Deletion of Data
CVE-2026-72662
KI
Kibana
Elastic
6.3
0%
Sep 26Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data
CVE-2026-72668
KI
Kibana
Elastic
7.3
0%
Sep 26Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Privilege Escalation
CVE-2026-82302
KI
Kibana
Elastic
8.1
0%
Sep 3Incorrect Authorization in Kibana Leading to Unauthorized Configuration Modification
CVE-2026-82299
KI
Kibana
Elastic
6.5
0%
Sep 3Incorrect Authorization in Kibana Leading to Information Disclosure
CVE-2026-82298
KI
Kibana
Elastic
4.3
0%
Sep 3Incorrect Authorization in Kibana Leading to Denial of Service
CVE-2026-78596
KI
Kibana
Elastic
4.3
0%
Sep 3Missing Authorization in Kibana Leading to Unauthorized Cross-Space Write Operations
CVE-2026-78595
KI
Kibana
Elastic
4.3
0%
Sep 3Missing Authorization in Kibana Fleet Plugin Leading to Cross-Space Agent Data Disclosure
CVE-2026-78593
KI
Kibana
Elastic
4.3
0%
Sep 3Improper Control of Generation of Code in Kibana Leading to Privilege Escalation
CVE-2026-78583
KI
Kibana
Elastic
8.1
0%
Sep 3Incorrect Authorization in Kibana Leading to Privilege Escalation
CVE-2026-82293
KI
Kibana
Elastic
4.3
0%
Sep 2Incorrect Authorization in Kibana Leading to Unauthorized Resource Consumption
CVE-2026-78588
FI
Filebeat
Elastic
6.5
0%
Sep 2Allocation of Resources Without Limits or Throttling in Filebeat Leading to Denial of Service
CVE-2026-78587
FS
Fleet Server
Elastic
3.1
0%
Sep 2Incorrect Authorization in Fleet Server Leading to Denial of Service of Agent Upload Operations
CVE-2026-78586
KI
Kibana
Elastic
6.5
0%
Sep 2Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service
CVE-2026-78584
KI
Kibana
Elastic
4.3
0%
Sep 2Observable Response Discrepancy in Kibana Leading to Cross-Space Information Disclosure
CVE-2026-78591
KI
Kibana
Elastic
6.3
0%
Sep 2Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Kibana Leading to Unauthorized Resource Deletion
CVE-2026-78590
KI
Kibana
Elastic
7.3
0%
Sep 2Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources
CVE-2026-78599
KI
Kibana
Elastic
6.5
0%
Sep 2Stored Path Traversal in Kibana Leading to Unauthorized Deletion of Internal Resources
CVE-2026-78598
KI
Kibana
Elastic
5.4
0%
Sep 2Incorrect Authorization in Kibana Leading to Unauthorized Cross-Space Exposure of Machine Learning Job Data
CVE-2026-78594
AS
Apm Server
Elastic
4.9
0%
Sep 2Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service
CVE-2026-78604
EA
Elastic Agent
Elastic
7.8
0%
Sep 2Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM
CVE-2026-78602
EM
Elastic Maps Server
Elastic
5.3
1%
Sep 2Improper Limitation of a Pathname to a Restricted Directory in Elastic Maps Server Leading to Unauthorized File Disclosure
CVE-2026-78601
KI
Kibana
Elastic
5.5
0%
Sep 2Missing Authorization in Kibana Leading to Unauthorized Elasticsearch Index Data Exposure
CVE-2026-78600
EO
Eck Operator
Elastic
3.5
0%
Sep 2Incomplete Cleanup in Elastic Cloud on Kubernetes Leading to Unauthorized Cross-Namespace Credential Retention
CVE-2026-78609
EO
Eck Operator
Elastic
5.4
0%
Sep 2Incorrect Authorization in Elastic Cloud on Kubernetes Leading to Unauthorized Modification of Data
CVE-2026-63138
KI
Kibana
Elastic
6.5
0%
Sep 1Improper Neutralization of Special Elements in Data Query Logic in Kibana Leading to Information Disclosure
CVE-2026-78597
KI
Kibana
Elastic
4.3
0%
Sep 1Missing Authorization in Kibana Entity Store Leading to Unauthorized API Key Creation
CVE-2026-78592
KI
Kibana
Elastic
7.3
0%
Sep 1Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources
CVE-2026-78606
KI
Kibana
Elastic
4.2
0%
Sep 1Incorrect Authorization in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data
CVE-2026-78603
KI
Kibana
Elastic
4.3
0%
Sep 1Missing Authorization in Kibana Leading to Unauthorized Disclosure of Fleet Deployment Metadata
CVE-2026-78607
EL
Elasticsearch
Elastic
7.1
0%
Sep 1Missing Authorization in Elasticsearch Leading to Information Disclosure