Medium WID-SEC-2026-3573 7 CVEs

Elasticsearch: Mehrere Schwachstellen ermöglichen Denial of Service

Published Sep 24, 2026 · Updated Sep 27, 2026 · Revision 2 · de-DE

Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Elasticsearch ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Elasticsearch ist eine Open Source, verteilte Echtzeit-Suche und Analyse-Engine.

Vulnerabilities 7

Medium 6.5

CVE-2026-82294

Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130).

Elastic Elasticsearch ruby4.0-elasticsearch ruby3.3-elasticsearch Azure Linux Wolfi

Sep 26, 2026
Medium 6.5

CVE-2026-82300

Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130).

Elastic Elasticsearch ruby4.0-elasticsearch ruby3.3-elasticsearch Azure Linux Wolfi

Sep 26, 2026
Medium 6.5

CVE-2026-94396

Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

Elastic Elasticsearch ruby4.0-elasticsearch ruby3.3-elasticsearch Wolfi

Sep 26, 2026
Medium 6.5

CVE-2026-94397

Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

Elastic Elasticsearch ruby4.0-elasticsearch ruby3.3-elasticsearch Azure Linux Wolfi

Sep 26, 2026
Medium 6.5

CVE-2026-94398

Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

Elastic Elasticsearch ruby4.0-elasticsearch ruby3.3-elasticsearch Wolfi

Sep 26, 2026
Medium 6.5

CVE-2026-94399

Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

Elastic Elasticsearch ruby4.0-elasticsearch ruby3.3-elasticsearch Azure Linux Wolfi

Sep 26, 2026
Medium 4.9

CVE-2026-94408

Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

Elastic Elasticsearch ruby4.0-elasticsearch ruby3.3-elasticsearch Azure Linux Wolfi

Sep 26, 2026

Revision history

2026-09-27 #2
Referenz(en) aufgenommen: EUVD-2026-87795, EUVD-2026-87796, EUVD-2026-87797, EUVD-2026-87798, EUVD-2026-87801, EUVD-2026-87802, EUVD-2026-87800
2026-09-24 #1
Initiale Fassung

References

Elastic Security Announcement vom 2026-09-24
https://discuss.elastic.co/t/elasticsearch-8-19-21-9-4-6-9-5-3-security-update-esa-2026-170/390681
Elastic Security Announcement vom 2026-09-24
https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-3-security-update-esa-2026-184/390688
Elastic Security Announcement vom 2026-09-24
https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-176/390682
Elastic Security Announcement vom 2026-09-24
https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-179/390683
Elastic Security Announcement vom 2026-09-24
https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-180/390684
Elastic Security Announcement vom 2026-09-24
https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-183/390687
Elastic Security Announcement vom 2026-09-24
https://discuss.elastic.co/t/elasticsearch-9-4-7-9-5-4-security-update-esa-2026-182/390686