Vendor
Elastic
396 known vulnerabilities.
Products
Kibana 196
Elasticsearch 91
Elastic Cloud Enterprise 13
Logstash 9
Apm Server 8
Packetbeat 8
Fleet Server 7
Elastic X-Pack Security 6
Elastic Agent 5
Eck Operator 4
Beats 3
Elastic Cloud Enterprise (ECE) 3
Filebeat 3
X-Pack Security 3
Elastic Enterprise Search 3
Elastic Endpoint Security 2
Elasticsearch X-Pack Machine Learning 2
Elastic Cloud on Kubernetes 2
Elastic App Search 2
Metricbeat 2
Elastic Agent and Elastic Defend 2
Elastic Defend 2
Elastic APM Agent for Go 1
Enterprise Search 1
Elastic Network Drive Connector 1
Elastic X-Pack Alerting 1
Kibana X-Pack Security 1
Elastic Package Registry 1
Elastic Endpoint Security and Elastic Endgame Security 1
Enterprisesearch 1
Endpoint 1
Elasticsearch-Hadoop 1
Elastic APM Java Agent 1
APM Java Agent 1
Elastic Code 1
Endpoint Security 1
Elastic APM agent for Python 1
Elastic APM agent for Ruby 1
Elastic Docker images 1
Elastic APM .NET Agent 1
1 result · Clear filters · Feed
-
High 7.5CVE-2026-115290 Public exploit
Uncontrolled Recursion in Elasticsearch Leading to Denial of Service
Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An unauthenticated attacker with network access to the remote cluster server interface of a node can send a specially crafted…