CVE Tools

Elastic

289 CVEs tracked since 2014. Since Jul 2014, 2 of them reached CISA KEV.

Elastic CVEs per month

Jul 2014 to Sep 2026. Point at a month, or focus the strip and use the arrow keys.
Elastic CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2014-0721
2014-08null or fewer
2014-09null or fewer
2014-10null or fewer
2014-11null or fewer
2014-12null or fewer
2015-01null or fewer
2015-0211
2015-03null or fewer
2015-04null or fewer
2015-05null or fewer
2015-0620
2015-07null or fewer
2015-08null or fewer
2015-09null or fewer
2015-10null or fewer
2015-11null or fewer
2015-1210
2016-01null or fewer
2016-02null or fewer
2016-03null or fewer
2016-04null or fewer
2016-05null or fewer
2016-06null or fewer
2016-07null or fewer
2016-08null or fewer
2016-09null or fewer
2016-10null or fewer
2016-11null or fewer
2016-12null or fewer
2017-01null or fewer
2017-02null or fewer
2017-03null or fewer
2017-04null or fewer
2017-05null or fewer
2017-06null or fewer
2017-07null or fewer
2017-0830
2017-0940
2017-10null or fewer
2017-11null or fewer
2017-1230
2018-01null or fewer
2018-02null or fewer
2018-0370
2018-04null or fewer
2018-05null or fewer
2018-06null or fewer
2018-07null or fewer
2018-08null or fewer
2018-0990
2018-10null or fewer
2018-11null or fewer
2018-1240
2019-01null or fewer
2019-02null or fewer
2019-03null or fewer
2019-04null or fewer
2019-05null or fewer
2019-06null or fewer
2019-0730
2019-08null or fewer
2019-09null or fewer
2019-1030
2019-11null or fewer
2019-12null or fewer
2020-01null or fewer
2020-02null or fewer
2020-03null or fewer
2020-04null or fewer
2020-05null or fewer
2020-0660
2020-07null or fewer
2020-0820
2020-09null or fewer
2020-10null or fewer
2020-11null or fewer
2020-12null or fewer
2021-01null or fewer
2021-0220
2021-03null or fewer
2021-04null or fewer
2021-0560
2021-06null or fewer
2021-0730
2021-08null or fewer
2021-0930
2021-10null or fewer
2021-1120
2021-12null or fewer
2022-01null or fewer
2022-02null or fewer
2022-0330
2022-04null or fewer
2022-05null or fewer
2022-06null or fewer
2022-07null or fewer
2022-08null or fewer
2022-09null or fewer
2022-10null or fewer
2022-11null or fewer
2022-12null or fewer
2023-01null or fewer
2023-0230
2023-03null or fewer
2023-04null or fewer
2023-05null or fewer
2023-06null or fewer
2023-07null or fewer
2023-08null or fewer
2023-09null or fewer
2023-1090
2023-1180
2023-1260
2024-01null or fewer
2024-02null or fewer
2024-03null or fewer
2024-04null or fewer
2024-05null or fewer
2024-0660
2024-07null or fewer
2024-08null or fewer
2024-09null or fewer
2024-10null or fewer
2024-11null or fewer
2024-12null or fewer
2025-0180
2025-02null or fewer
2025-03null or fewer
2025-0450
2025-0580
2025-06null or fewer
2025-07null or fewer
2025-08null or fewer
2025-09null or fewer
2025-1060
2025-11null or fewer
2025-12130
2026-0160
2026-0260
2026-03null or fewer
2026-0470
2026-05100
2026-06null or fewer
2026-07280
2026-08490
2026-09420

Products

The products that kept showing up in Elastic's monthly top three, with their CVEs summed over those months.

  1. Kibana15426 months
  2. Elasticsearch6224 months
  3. Packetbeat64 months
  4. Elastic Cloud Enterprise53 months
  5. Elastic Cloud On Kubernetes53 months
  6. Logstash55 months
  7. Elastic Agent32 months
  8. Elastic Enterprise Search32 months
  9. Enterprise Search32 months
  10. Elastic App Search22 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Elastic.

  1. CVE-2026-94408Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service4.9
  2. CVE-2026-94397Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service6.5
  3. CVE-2026-94396Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service6.5
  4. CVE-2026-94400Uncontrolled Resource Consumption in Kibana Leading to denial of service6.5
  5. CVE-2026-94399Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service6.5
  6. CVE-2026-94398Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service6.5
  7. CVE-2026-82300Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service6.5
  8. CVE-2026-82294Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service6.5
  9. CVE-2026-78582Missing Authorization in Kibana Leading to Unauthorized Deletion of Data6.5
  10. CVE-2026-72662Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data6.3
  11. CVE-2026-72668Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Privilege Escalation7.3
  12. CVE-2026-82302Incorrect Authorization in Kibana Leading to Unauthorized Configuration Modification8.1
  13. CVE-2026-82299Incorrect Authorization in Kibana Leading to Information Disclosure6.5
  14. CVE-2026-82298Incorrect Authorization in Kibana Leading to Denial of Service4.3
  15. CVE-2026-78596Missing Authorization in Kibana Leading to Unauthorized Cross-Space Write Operations4.3

The record

Peak rank
#22 in Aug 2026
Busiest month shown
Aug 2026, 49 CVEs
Months with a KEV entry
2 since Jul 2014
Monthly snapshots
37 since 2014
Elastic's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store