CVE Tracker · Vendor

Elastic CVEs

5 CVEs in the tracker, 3 in the CISA KEV catalogue.

All vendors · RSS feed for Elastic · Tracker data last updated 18 Oct 2026.

Showing 5 of 5

CVE-2026-103007CVSS 7.2 highEPSS 0.34%2026-10-06
elasticsearch. Incorrect Authorization (CWE-863) in Elasticsearch can lead to Privilege Escalation via a delegated administr…
CVE-2026-102406CVSS 8.8 highEPSS 0.34%2026-10-06
kibana. Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data intercep…
CVE-2015-1427CVSS 9.8 criticalEPSS 100%KEV2015-02-17
Elasticsearch. Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability
CVE-2019-7609No CVSSEPSS 95.3%KEV
Kibana. Kibana Arbitrary Code Execution
CVE-2014-3120No CVSSEPSS 88.6%KEV
Elasticsearch. Elasticsearch Remote Code Execution Vulnerability