en
Elastic is a global technology company that builds software and hosted services for search, observability, security analytics, and AI-enabled data use. Its offerings support enterprise and public-sector organizations through cloud, serverless, and self-managed deployments.
As of 10/22/2026, Elastic recorded 116 security vulnerabilities in the last 90 days across 10 products, including 24 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Kibana had the most security vulnerabilities in the Elastic ecosystem, with 68 vulnerabilities—approximately 58.62% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-103009Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information DisclosureCVE-2026-103008Uncontrolled Recursion in Elasticsearch Leading to Denial of ServiceCVE-2026-103007Incorrect Authorization in Elasticsearch Leading to Privilege EscalationCVE-2026-103006Uncontrolled Recursion in Elasticsearch Leading to Denial of ServiceCVE-2026-103005Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service396 Results | Page 1 of 40
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |