Skip to content
OpenAdvisories

Product · Elastic

Fleet Server

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2026-78587

    Incorrect Authorization in Fleet Server Leading to Denial of Service of Agent Upload Operations

    Incorrect Authorization (CWE-863) in Fleet Server can lead to a denial of service of agent upload operations via Privilege Abuse (CAPEC-122). Fleet Server does not correctly verify session ownership during multi-part data upload operations, allowing any authe…

    Elastic Fleet Server