CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

Elastic — security advisories

14 advisories1 exploitedlatest 2026-08-14⚡ RSS feed

Tracked Elastic products:

Elasticsearch Elastic products Kibana

⚡ Watch Elastic

Get an email when a new Elastic advisory drops — max one per day, one-click unsubscribe.

[NEW] [high] Elasticsearch: Multiple vulnerabilities

highCVE-2026-72636 CVE-2026-72638 CVE-2026-72639 CVE-2026-72642cert-bund2026-08-14

[NEW] [high] Kibana: Multiple vulnerabilities

highCVE-2026-72629 CVE-2026-72630 CVE-2026-72631 CVE-2026-72632cert-bund2026-08-14

Multiple vulnerabilities in Elastic Kibana (August 14, 2026)

unknownCVE-2026-72659 CVE-2026-72632 CVE-2026-72643 CVE-2026-72675cert-fr-avis2026-08-14

CVE-2025-68390: Elasticsearch Allocation of Resources Without Limits or Throttling

mediumCVSS 4.9CVE-2025-68390msrc2026-08-06

CVE-2025-68384: Elasticsearch Allocation of Resources Without Limits or Throttling

mediumCVSS 6.5CVE-2025-68384msrc2026-08-06

CVE-2024-23444: Elasticsearch elasticsearch-certutil csr fails to encrypt private key

mediumCVSS 4.9CVE-2024-23444msrc2026-08-06

CVE-2025-37727: Elasticsearch Insertion of sensitive information in log file

mediumCVSS 5.7CVE-2025-37727msrc2026-08-06

CVE-2025-37731: Elasticsearch Improper Authentication

mediumCVSS 6.8CVE-2025-37731msrc2026-08-06

CVE-2023-31417: Elasticsearch Insertion of sensitive information in audit logs

mediumCVSS 4.1CVE-2023-31417msrc2026-08-06

Multiple vulnerabilities in Elastic products (July 22, 2026)

unknownCVE-2026-63136 CVE-2026-63143 CVE-2026-63263 CVE-2026-56144cert-fr-avis2026-07-22

CVE-2026-63263: Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

mediumCVSS 6.5CVE-2026-63263msrc2026-07-14

CVE-2026-56149: Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

mediumCVSS 4.9CVE-2026-56149msrc2026-07-14

Multiple vulnerabilities in Elastic products (July 2, 2026)

unknownCVE-2026-49091 CVE-2026-56150 CVE-2026-56151 CVE-2026-49090cert-fr-avis2026-07-02

CVE-2014-3120: Elasticsearch Remote Code Execution Vulnerability

criticalexploitedCVE-2014-3120cisa-kev2022-03-25