VendorsElasticelasticsearch9.5.0
Vulnerabilities

Elastic Elasticsearch 9.5.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2026-72649
Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution
Published 2026-09-01 · Analyzed
8.8EPSS 0.009
CVE-2026-78607
Missing Authorization in Elasticsearch Leading to Information Disclosure
Published 2026-09-01 · Analyzed
7.1EPSS 0.003
CVE-2026-78605
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Elasticsearch Leading to Information Disclosure
Published 2026-09-01 · Analyzed
5.9EPSS 0.003