CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

Elasticsearch — security advisories

7 advisories1 exploitedlatest 2026-08-06⚡ RSS feed

Tracked Elasticsearch products:

Groovy Scripting Engine Elasticsearch

⚡ Watch Elasticsearch

Get an email when a new Elasticsearch advisory drops — max one per day, one-click unsubscribe.

CVE-2023-31419: Elasticsearch StackOverflow vulnerability

mediumCVSS 6.5CVE-2023-31419msrc2026-08-06

[NEW] [medium] Elasticsearch: Multiple vulnerabilities allow DoS and information disclosure

mediumCVE-2026-56144 CVE-2026-56145 CVE-2026-63136 CVE-2026-63140cert-bund2026-07-22

[NEW] [medium] Elasticsearch: Multiple vulnerabilities allow denial of service

mediumCVE-2026-49090 CVE-2026-56148 CVE-2026-56149cert-bund2026-07-15

CVE-2026-56145: Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

mediumCVSS 6.5CVE-2026-56145msrc2026-07-14

CVE-2026-63140: Reachable Assertion in Elasticsearch Leading to Denial of Service

mediumCVSS 6.5CVE-2026-63140msrc2026-07-14

CVE-2026-63136: Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

mediumCVSS 6.5CVE-2026-63136msrc2026-07-14

CVE-2015-1427: Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability

criticalexploitedCVE-2015-1427cisa-kev2022-03-25