170
CVEs
5
Critical
36
High
0
KEV
3
PoC
33
Unpatched C/H
15.9%
Patch Rate
0.2%
Avg EPSS
Severity Breakdown
CRITICAL
5
HIGH
36
MEDIUM
125
LOW
4
Monthly CVE Trend
Affected Products (30)
Kibana
166
Elasticsearch
77
Cloud Foundry Elastic Runtime
23
Elastic Services Controller
19
Logstash
13
Java
11
Cloud Foundry Uaa
11
Open Redirect
10
Redis
9
Peoplesoft Enterprise Peopletools
9
Amazon
9
X Pack
9
Python
8
Elastic Cloud Enterprise
8
Cf Release
8
Kubernetes
8
Cloud Foundry
7
Elastic Agent
6
Cloud Foundry Uaa Bosh
6
Elastic Storage Server
6
Cloud Foundry Ops Manager
5
Enterprise Search
5
Opensearch
5
Fleet Server
5
Openshift Container Platform
5
Node.js
4
Docker
4
Communications Cloud Native Core Automated Test Suite
4
Apm Server
4
Eck Operator
4
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-54511 | Log injection in @logtape/syslog allows network-accessible attackers to forge arbitrary syslog records in downstream collectors such as rsyslog, Splunk, and Elastic Stack. The escapeStructuredDataValue() function omits C0 control character escaping, so a literal newline embedded in a log property value terminates the current RFC 6587 TCP syslog frame and begins a new one; if the attacker-supplied bytes constitute a valid RFC 5424 header, the downstream collector accepts them as a separate, authentic-looking record. A second injection path exists through unvalidated SD-NAME keys, which can prematurely close structured-data elements. Both paths require the non-default SyslogSinkOptions.includeStructuredData: true setting. Publicly available proof-of-concept code exists; no CISA KEV listing at time of analysis. | HIGH | 8.6 | 0.3% | 63 |
PoC
|
| CVE-2026-89261 | Unauthenticated access to Elasticsearch index management endpoints in MoguBlog's mogu_search microservice (through version 6.2) allows any remote attacker to wipe, restructure, or poison the platform's blog search index. The ElasticSearchRestApi controller exposes POST operations - index initialization, bulk delete, single-document delete, and arbitrary entry injection - without any authentication gate in WebSecurityConfig. Four distinct proof-of-concept Python scripts are publicly available on GitHub, scripting each attack path and significantly lowering the exploitation barrier. | MEDIUM | 6.9 | 0.5% | 54 |
PoC
No patch
|
| CVE-2026-54350 | Unauthenticated NoSQL operator injection in Budibase server <= 3.39.0 allows anonymous attackers to read or modify all documents in any MongoDB, CouchDB, Elasticsearch, DynamoDB-PartiQL, or REST-with-JSON-body datasource when a builder has published a query with a PUBLIC role. By injecting JSON metacharacters through query parameters, an attacker can override the intended filter, bypass authentication, and exfiltrate sensitive data or mass-update records in a single HTTP request. Exploit code is publicly available, though no active exploitation is confirmed, and the vulnerability has been patched in version 3.39.12. | CRITICAL | 9.8 | 0.4% | 49 |
|
| CVE-2026-33466 | Remote code execution in Elastic Logstash versions 8.0.0 through 8.19.13 allows unauthenticated network attackers to write arbitrary files and execute code via malicious compressed archives. The vulnerability exploits improper path validation in archive extraction utilities, enabling attackers who compromise or control update endpoints to deliver path traversal payloads. When automatic pipeline reloading is enabled, arbitrary file writes escalate to full RCE with Logstash process privileges. CVSS 8.1 (High) with network vector but high attack complexity. EPSS data and KEV status not provided; no public exploit confirmed at time of analysis, though the technical details disclosed increase weaponization risk for environments with exposed update mechanisms. | CRITICAL | 9.8 | 0.3% | 49 |
No patch
|
| CVE-2026-73579 | We need answer JSON only. Need analyze. Need ensure every field string. data_quality_flags array of objects maybe empty. Need extract. Let's inspect input. CVE-2026-73579 Apache Syncope incorrect authorization. Description. CVSS 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. CWE-863. Tags: Authentication Bypass, Apache, Elastic. SSVC exploitation none automatable yes technical impact total. ENISA. References lists advisory. Need product_name 1-3 words: Apache Syncope. summary original. technical_context. risk_assessment. affected_products. remediation. exploit_scenario. exploitation_conditions. attack_chain. confidence_notes. data_quality_flags. prevalence. prevalence_basis. assessed_cvss_vector. assessed_cvss40_vector. Need be careful: "Reported by security@apache.org". Tags include Elastic maybe because search backend? Authentication Bypass. Need use all data. KEV not present, POC not explicit. Need not mention POC as public. EPSS not provided. Could say EPSS not available. CVSS provided NVD? but references nvd none? We can reference. Need assess CVSS ourselves. Description says incorrect authorization: non-recursive search requests possible Realms filter rendered empty, voiding restrictions on requester privileges. This is an authorization bypass allowing search results beyond permissions. CVSS from input 9.8: AV:N AC:L PR:N UI:N. But is it truly PR:N? Description says "requester's permissions" maybe authenticated user? Search requests likely authenticated? Let's investigate. Apache Syncope is identity management. Any search requests are transformed... Realms filter ensures results matching requester's permissions. For non-recursive search requests possible filter empty. Attack vector network. Does exploit require authentication? If any requester? Incorrect authorization could be authenticated low privilege. But input CVSS has PR:N. We must not contradict maybe assess. Need "CVSS vector (attack vector, complexity, privileges)" compare. We can note CVSS says unauthent | CRITICAL | 9.8 | – | 49 |
No patch
|
| CVE-2026-31215 | Remote unauthenticated attackers can delete arbitrary ElasticSearch documents and MinIO storage files in nexent v1.7.5.2 via the unprotected DELETE /{index_name}/documents endpoint. The backend service fails to authenticate requests or validate the path_or_url parameter, enabling mass data destruction and denial of service. EPSS probability (0.12%) indicates low predicted exploitation likelihood, and no active exploitation or public exploit code has been identified at time of analysis, though the CVSS 9.1 reflects the severe impact of unauthenticated remote data deletion. | CRITICAL | 9.1 | 0.1% | 46 |
No patch
|
| CVE-2026-72649 | Remote code execution in Elasticsearch's machine learning component allows an authenticated user with ML model deployment privileges to execute arbitrary attacker-controlled logic on the Elasticsearch host node by supplying a crafted trained model artifact. The flaw stems from unsafe deserialization (CWE-502) of model artifact data during the ML inference loading process, granting the attacker a broader OS system-call surface than the ML subsystem is intended to expose. Elastic has released fixed versions 8.19.2, 9.4.5, and 9.5.1 via ESA-2026-114; no public exploit code or CISA KEV listing has been identified at time of analysis. | HIGH | 8.8 | 0.6% | 45 |
No patch
|
| CVE-2026-72642 | Heap corruption and potential remote code execution in Elasticsearch's native ML inference engine can be triggered by any user holding the low-privilege ML model upload and deploy permission. By crafting a model that embeds an operation computing a memory address from an attacker-controlled offset, a low-privileged authenticated user can cause the native inference subprocess to read and write outside its allocated heap, reliably crashing that process or, under controlled heap layout conditions, executing arbitrary code within it. No active exploitation or public proof-of-concept has been identified at time of analysis, but the CVSS 8.8 rating, network-accessible vector, and explicit RCE potential in the vendor description place this in the urgent-remediation tier for any organization running Elasticsearch with ML features delegated to non-admin users. | HIGH | 8.8 | 0.3% | 44 |
No patch
|
| CVE-2026-72681 | Privilege escalation in Elastic Kibana's Agent Builder component (versions 9.4.0-9.4.3) allows authenticated low-privileged users to create and execute Agent tools that invoke Kibana features they are not authorized to access, bypassing the platform's feature-level access controls. The Agent Builder omits authorization verification against the target feature's required privilege set before tool creation and execution, enabling cross-feature privilege escalation and potential disclosure of sensitive data. No public exploit code exists and EPSS is 0.25%, but SSVC rates technical impact as total, making this a meaningful risk in multi-tenant or role-segmented Kibana deployments. | HIGH | 8.8 | 0.3% | 44 |
No patch
|
| CVE-2026-47835 | NoSQL/query injection in Spring AI Vector Stores (1.0.0-1.0.8 and 1.1.0-1.1.7) allows remote unauthenticated attackers to inject special characters into vector-store inputs and force execution of arbitrary queries against Elasticsearch, OpenSearch, and GemFire VectorDB backends. The flaw resides in the spring-ai-elasticsearch-store, spring-ai-opensearch-store, and spring-ai-gemfire-store components, enabling information disclosure and limited integrity/availability impact against any application embedding Spring AI's vector-store abstraction. No public exploit identified at time of analysis, but the CVSS 8.6 (scope unchanged here, network vector, no privileges) makes this a high-priority patch for any Spring AI deployment ingesting untrusted text. | HIGH | 8.6 | 0.5% | 43 |
|
| CVE-2026-54008 | Server-side request forgery in Open WebUI versions 0.9.5 and earlier allows authenticated OAuth users to read arbitrary internal HTTP responses by abusing the `_process_picture_url` function in `backend/open_webui/utils/oauth.py`, which validates only the initial URL and then permits aiohttp's default 10-redirect follow chain to reach internal addresses. The decoded response body is stored in the attacker's `profile_image_url` and retrievable via `GET /api/v1/auths/`, yielding cloud metadata credentials and access to localhost-bound services. Publicly available exploit code exists (detailed sentinel-verified PoC supplied by the reporter); no public exploit identified at time of analysis in the form of weaponized tooling, and the CVE is not on the CISA KEV list. | HIGH | 8.5 | 0.2% | 43 |
|
| CVE-2026-54320 | Authentication bypass in Daytona prior to 0.184.0 allows attackers to join organizations via pending invitations using unverified email addresses. The invitation accept and decline paths failed to enforce email verification (unlike organization creation), so on OIDC identity providers permitting self-service signup with pre-verification sessions, an attacker registering an email matching a pending invite can claim it and inherit the assigned role - up to Owner. No public exploit identified at time of analysis, but the path to full Owner-level organization takeover makes this a high-priority fix. | HIGH | 8.4 | 0.2% | 42 |
|
| CVE-2026-90772 | Stored cross-site scripting in Amundsen Frontend through 4.3.0 allows authenticated users with description-write access to inject arbitrary JavaScript into table, dashboard, and feature description fields, executing attacker-controlled code in the browser of every user who subsequently views search results. The root cause is React's dangerouslySetInnerHTML used without any HTML sanitization in ResourceListItem components (TableListItem and siblings), meaning payloads such as img elements with onerror handlers stored via the metadata service or Elasticsearch persist and fire on each page load. No public exploit code has been identified at time of analysis, but the attack pattern is elementary for anyone with metadata write access. | HIGH | 8.3 | 0.2% | 42 |
No patch
|
| CVE-2026-63137 | Privilege escalation in Kibana allows an authenticated user holding workflow edit permissions to cause scheduled workflow executions to run under the privileges of a higher-privileged user, granting unauthorized read and write access to data outside their authorization scope. The flaw (CWE-863, Incorrect Authorization) stems from Kibana's workflow scheduling subsystem failing to enforce authorization boundaries when executing scheduled jobs - a pattern classified under CAPEC-180. No public exploit exists at time of analysis, but the CVSS 8.3 (High) score with a network-accessible, low-privilege attack vector reflects genuine impact for any multi-user Kibana deployment. Elastic's advisory ESA-2026-61 references Kibana 9.4.3 as the fix release. | HIGH | 8.3 | 0.3% | 42 |
No patch
|
| CVE-2026-72665 | Missing Authorization in Kibana's Elastic Security module permits authenticated users holding detection rule authoring privileges to execute Osquery live queries and Elastic Defend response actions against enrolled managed endpoints without possessing the specific Osquery or Elastic Defend privileges that normally govern those capabilities. The CVSS 8.1 score reflects a network-accessible, low-complexity attack path with high confidentiality and integrity impact against enrolled host infrastructure. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis, but patch versions 8.19.20 and 9.4.5 are available per Elastic Security Advisory ESA-2026-96. | HIGH | 8.1 | 0.3% | 41 |
No patch
|