{"schema_version":1,"title":"Elasticsearch vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 24 vulnerabilities in Elasticsearch: 0 in the last 7 days and 20 in the last 90 days, 2 of them critical and 2 exploited in the wild. The most recent, CVE-2026-78607, was published on 1 September 2026.","url":"https://junglewise.ai/threats/technologies/elasticsearch","json_url":"https://junglewise.ai/threats/technologies/elasticsearch.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/elasticsearch","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":2,"all_time":24,"critical":2,"exploited":2,"last_7_days":0,"last_30_days":4,"last_90_days":20,"last_365_days":21},"latest":[{"cve":"CVE-2026-78607","cvss":5.4,"epss":0.0033,"slug":"cve-2026-78607-elastic-elasticsearch-missing-authorization-in-custom-inference","title":"Elastic Elasticsearch missing authorization in custom inference service","severity":"medium","exploited":false,"published_at":"2026-09-01T20:17:24.03+00:00","url":"https://junglewise.ai/threats/cve-2026-78607-elastic-elasticsearch-missing-authorization-in-custom-inference"},{"cve":"CVE-2026-78605","cvss":5.9,"epss":0.0034,"slug":"cve-2026-78605-elasticsearch-http-request-smuggling-leading-to-information","title":"Elasticsearch HTTP request smuggling leading to information disclosure","severity":"medium","exploited":false,"published_at":"2026-09-01T20:17:23.757+00:00","url":"https://junglewise.ai/threats/cve-2026-78605-elasticsearch-http-request-smuggling-leading-to-information"},{"cve":"CVE-2026-72649","cvss":8.8,"epss":0.0092,"slug":"cve-2026-72649-elasticsearch-machine-learning-remote-code-execution-via","title":"Elasticsearch machine learning remote code execution via deserialization","severity":"high","exploited":false,"published_at":"2026-09-01T20:17:16.853+00:00","url":"https://junglewise.ai/threats/cve-2026-72649-elasticsearch-machine-learning-remote-code-execution-via"},{"cve":"CVE-2026-56143","cvss":4.9,"epss":0.0044,"slug":"cve-2026-56143-elastic-elasticsearch-resource-exhaustion-denial-of-service","title":"Elastic Elasticsearch resource exhaustion denial of service","severity":"medium","exploited":false,"published_at":"2026-09-01T20:17:14.99+00:00","url":"https://junglewise.ai/threats/cve-2026-56143-elastic-elasticsearch-resource-exhaustion-denial-of-service"},{"cve":"CVE-2026-72656","cvss":6.5,"epss":0.0042,"slug":"cve-2026-72656-elastic-elasticsearch-es-ql-heap-exhaustion-denial-of-service","title":"Elastic Elasticsearch ES|QL heap exhaustion denial of service","severity":"medium","exploited":false,"published_at":"2026-08-13T20:17:25.747+00:00","url":"https://junglewise.ai/threats/cve-2026-72656-elastic-elasticsearch-es-ql-heap-exhaustion-denial-of-service"},{"cve":"CVE-2026-72647","cvss":6.5,"epss":0.0042,"slug":"cve-2026-72647-elasticsearch-uncontrolled-recursion-denial-of-service","title":"Elasticsearch uncontrolled recursion denial of service","severity":"medium","exploited":false,"published_at":"2026-08-13T20:17:25.043+00:00","url":"https://junglewise.ai/threats/cve-2026-72647-elasticsearch-uncontrolled-recursion-denial-of-service"},{"cve":"CVE-2026-72645","cvss":6.5,"epss":0.0042,"slug":"cve-2026-72645-elastic-elasticsearch-memory-allocation-denial-of-service","title":"Elastic Elasticsearch memory allocation denial of service","severity":"medium","exploited":false,"published_at":"2026-08-13T20:17:24.927+00:00","url":"https://junglewise.ai/threats/cve-2026-72645-elastic-elasticsearch-memory-allocation-denial-of-service"},{"cve":"CVE-2026-72642","cvss":8.8,"epss":0.006,"slug":"cve-2026-72642-elasticsearch-out-of-range-pointer-offset-in-machine-learning","title":"Elasticsearch out-of-range pointer offset in machine learning inference","severity":"high","exploited":false,"published_at":"2026-08-13T20:17:24.673+00:00","url":"https://junglewise.ai/threats/cve-2026-72642-elasticsearch-out-of-range-pointer-offset-in-machine-learning"},{"cve":"CVE-2026-72639","cvss":6.5,"epss":0.0042,"slug":"cve-2026-72639-elasticsearch-memory-exhaustion-in-search-highlighting","title":"Elasticsearch memory exhaustion in search highlighting","severity":"medium","exploited":false,"published_at":"2026-08-13T20:17:24.427+00:00","url":"https://junglewise.ai/threats/cve-2026-72639-elasticsearch-memory-exhaustion-in-search-highlighting"},{"cve":"CVE-2026-72638","cvss":6.5,"epss":0.0042,"slug":"cve-2026-72638-elasticsearch-uncontrolled-recursion-denial-of-service","title":"Elasticsearch uncontrolled recursion denial of service","severity":"medium","exploited":false,"published_at":"2026-08-13T20:17:24.31+00:00","url":"https://junglewise.ai/threats/cve-2026-72638-elasticsearch-uncontrolled-recursion-denial-of-service"},{"cve":"CVE-2026-72636","cvss":6.5,"epss":0.0042,"slug":"cve-2026-72636-elastic-elasticsearch-uncontrolled-recursion-in-wildcard-matching","title":"Elastic Elasticsearch uncontrolled recursion in wildcard matching","severity":"medium","exploited":false,"published_at":"2026-08-13T20:17:24.187+00:00","url":"https://junglewise.ai/threats/cve-2026-72636-elastic-elasticsearch-uncontrolled-recursion-in-wildcard-matching"},{"cve":"CVE-2026-63263","cvss":6.5,"slug":"cve-2026-63263-elastic-elasticsearch-denial-of-service-in-es-ql-engine","title":"Elastic Elasticsearch denial of service in ES|QL engine","severity":"medium","exploited":false,"published_at":"2026-07-22T00:17:31.283+00:00","url":"https://junglewise.ai/threats/cve-2026-63263-elastic-elasticsearch-denial-of-service-in-es-ql-engine"},{"cve":"CVE-2026-63144","cvss":6.5,"slug":"cve-2026-63144-elastic-elasticsearch-uncontrolled-recursion-in-query-evaluation","title":"Elastic Elasticsearch uncontrolled recursion in query evaluation component","severity":"medium","exploited":false,"published_at":"2026-07-21T23:18:02.343+00:00","url":"https://junglewise.ai/threats/cve-2026-63144-elastic-elasticsearch-uncontrolled-recursion-in-query-evaluation"},{"cve":"CVE-2026-63140","cvss":6.5,"slug":"cve-2026-63140-elastic-elasticsearch-denial-of-service-via-reachable-assertion","title":"Elastic Elasticsearch denial of service via reachable assertion in query parsing","severity":"medium","exploited":false,"published_at":"2026-07-21T21:16:53.073+00:00","url":"https://junglewise.ai/threats/cve-2026-63140-elastic-elasticsearch-denial-of-service-via-reachable-assertion"},{"cve":"CVE-2026-63136","cvss":6.5,"slug":"cve-2026-63136-elastic-elasticsearch-denial-of-service-via-excessive-memory","title":"Elastic Elasticsearch denial of service via excessive memory allocation","severity":"medium","exploited":false,"published_at":"2026-07-21T21:16:52.85+00:00","url":"https://junglewise.ai/threats/cve-2026-63136-elastic-elasticsearch-denial-of-service-via-excessive-memory"},{"cve":"CVE-2026-56145","cvss":6.5,"slug":"cve-2026-56145-elastic-elasticsearch-denial-of-service-in-eql-sequence-queries","title":"Elastic Elasticsearch denial of service in EQL sequence queries","severity":"medium","exploited":false,"published_at":"2026-07-21T20:17:02.5+00:00","url":"https://junglewise.ai/threats/cve-2026-56145-elastic-elasticsearch-denial-of-service-in-eql-sequence-queries"},{"cve":"CVE-2026-56144","cvss":5.3,"slug":"cve-2026-56144-elastic-elasticsearch-incorrect-authorization-in-ingest","title":"Elastic Elasticsearch incorrect authorization in ingest simulation","severity":"medium","exploited":false,"published_at":"2026-07-21T20:17:02.377+00:00","url":"https://junglewise.ai/threats/cve-2026-56144-elastic-elasticsearch-incorrect-authorization-in-ingest"},{"cve":"CVE-2026-49090","cvss":6.5,"slug":"cve-2026-49090-elastic-elasticseach-denial-of-service-via-bulk-api-resource","title":"Elastic Elasticseach denial of service via bulk API resource exhaustion","severity":"medium","exploited":false,"published_at":"2026-07-01T18:16:33.54+00:00","url":"https://junglewise.ai/threats/cve-2026-49090-elastic-elasticseach-denial-of-service-via-bulk-api-resource"},{"cve":"CVE-2026-56149","cvss":4.9,"slug":"cve-2026-56149-elastic-elasticsearch-denial-of-service-in-machine-learning","title":"Elastic Elasticsearch denial of service in machine learning component","severity":"medium","exploited":false,"published_at":"2026-07-01T17:16:36.957+00:00","url":"https://junglewise.ai/threats/cve-2026-56149-elastic-elasticsearch-denial-of-service-in-machine-learning"},{"cve":"CVE-2026-56148","cvss":6.5,"slug":"cve-2026-56148-elastic-elasticsearch-denial-of-service-via-uncontrolled","title":"Elastic Elasticsearch denial of service via uncontrolled recursion","severity":"medium","exploited":false,"published_at":"2026-07-01T17:16:36.84+00:00","url":"https://junglewise.ai/threats/cve-2026-56148-elastic-elasticsearch-denial-of-service-via-uncontrolled"},{"cve":"CVE-2025-37731","cvss":6.8,"epss":0.0019,"slug":"cve-2025-37731-elasticsearch-pki-realm-authentication-bypass-via-crafted-client","title":"Elasticsearch PKI realm authentication bypass via crafted client certificates","severity":"medium","exploited":false,"published_at":"2025-12-15T12:30:27+00:00","url":"https://junglewise.ai/threats/cve-2025-37731-elasticsearch-pki-realm-authentication-bypass-via-crafted-client"},{"cve":"CVE-2024-52980","cvss":6.5,"epss":0.0054,"slug":"cve-2024-52980-elastic-elasticsearch-denial-of-service-via-grok-pattern","title":"Elastic Elasticsearch denial of service via grok pattern recursion","severity":"medium","exploited":false,"published_at":"2025-04-08T18:34:42+00:00","url":"https://junglewise.ai/threats/cve-2024-52980-elastic-elasticsearch-denial-of-service-via-grok-pattern"},{"cve":"CVE-2014-3120","cvss":3.1,"epss":0.8856,"slug":"cve-2014-3120-elasticsearch-remote-code-execution-vulnerability","title":"Elasticsearch Improper Access Control vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-17T03:28:58+00:00","url":"https://junglewise.ai/threats/cve-2014-3120-elasticsearch-remote-code-execution-vulnerability"},{"cve":"CVE-2015-1427","cvss":9.8,"epss":0.9991,"slug":"cve-2015-1427-elasticsearch-groovy-scripting-engine-remote-code-execution","title":"Improper Access Control in Elasticsearch","severity":"critical","exploited":true,"published_at":"2022-05-14T02:49:44+00:00","url":"https://junglewise.ai/threats/cve-2015-1427-elasticsearch-groovy-scripting-engine-remote-code-execution"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":6},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":7},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Elastic Kibana","slug":"kibana","vulnerabilities":80,"url":"https://junglewise.ai/threats/technologies/kibana"},{"name":"Elastic Cloud on Kubernetes","slug":"cloud-on-kubernetes","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/cloud-on-kubernetes"},{"name":"Elastic Fleet Server","slug":"fleet-server","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/fleet-server"}],"technology":{"hub":true,"name":"Elasticsearch","slug":"elasticsearch","vendor":{"name":"Elastic","slug":"elastic","url":"https://junglewise.ai/threats/vendors/elastic"},"aliases":[],"category":"database","homepage":"https://www.elastic.co/elasticsearch/","repo_url":"https://github.com/elastic/elasticsearch","description":"Elasticsearch is a distributed, RESTful search and analytics engine built on Apache Lucene.","url":"https://junglewise.ai/threats/technologies/elasticsearch"},"most_severe":[{"cve":"CVE-2015-1427","cvss":9.8,"epss":0.9991,"slug":"cve-2015-1427-elasticsearch-groovy-scripting-engine-remote-code-execution","title":"Improper Access Control in Elasticsearch","severity":"critical","exploited":true,"published_at":"2022-05-14T02:49:44+00:00","url":"https://junglewise.ai/threats/cve-2015-1427-elasticsearch-groovy-scripting-engine-remote-code-execution"},{"cve":"CVE-2014-3120","cvss":3.1,"epss":0.8856,"slug":"cve-2014-3120-elasticsearch-remote-code-execution-vulnerability","title":"Elasticsearch Improper Access Control vulnerability","severity":"critical","exploited":true,"published_at":"2022-05-17T03:28:58+00:00","url":"https://junglewise.ai/threats/cve-2014-3120-elasticsearch-remote-code-execution-vulnerability"},{"cve":"CVE-2026-72649","cvss":8.8,"epss":0.0092,"slug":"cve-2026-72649-elasticsearch-machine-learning-remote-code-execution-via","title":"Elasticsearch machine learning remote code execution via deserialization","severity":"high","exploited":false,"published_at":"2026-09-01T20:17:16.853+00:00","url":"https://junglewise.ai/threats/cve-2026-72649-elasticsearch-machine-learning-remote-code-execution-via"},{"cve":"CVE-2026-72642","cvss":8.8,"epss":0.006,"slug":"cve-2026-72642-elasticsearch-out-of-range-pointer-offset-in-machine-learning","title":"Elasticsearch out-of-range pointer offset in machine learning inference","severity":"high","exploited":false,"published_at":"2026-08-13T20:17:24.673+00:00","url":"https://junglewise.ai/threats/cve-2026-72642-elasticsearch-out-of-range-pointer-offset-in-machine-learning"},{"cve":"CVE-2025-37731","cvss":6.8,"epss":0.0019,"slug":"cve-2025-37731-elasticsearch-pki-realm-authentication-bypass-via-crafted-client","title":"Elasticsearch PKI realm authentication bypass via crafted client certificates","severity":"medium","exploited":false,"published_at":"2025-12-15T12:30:27+00:00","url":"https://junglewise.ai/threats/cve-2025-37731-elasticsearch-pki-realm-authentication-bypass-via-crafted-client"},{"cve":"CVE-2024-52980","cvss":6.5,"epss":0.0054,"slug":"cve-2024-52980-elastic-elasticsearch-denial-of-service-via-grok-pattern","title":"Elastic Elasticsearch denial of service via grok pattern recursion","severity":"medium","exploited":false,"published_at":"2025-04-08T18:34:42+00:00","url":"https://junglewise.ai/threats/cve-2024-52980-elastic-elasticsearch-denial-of-service-via-grok-pattern"},{"cve":"CVE-2026-72656","cvss":6.5,"epss":0.0042,"slug":"cve-2026-72656-elastic-elasticsearch-es-ql-heap-exhaustion-denial-of-service","title":"Elastic Elasticsearch ES|QL heap exhaustion denial of service","severity":"medium","exploited":false,"published_at":"2026-08-13T20:17:25.747+00:00","url":"https://junglewise.ai/threats/cve-2026-72656-elastic-elasticsearch-es-ql-heap-exhaustion-denial-of-service"},{"cve":"CVE-2026-72647","cvss":6.5,"epss":0.0042,"slug":"cve-2026-72647-elasticsearch-uncontrolled-recursion-denial-of-service","title":"Elasticsearch uncontrolled recursion denial of service","severity":"medium","exploited":false,"published_at":"2026-08-13T20:17:25.043+00:00","url":"https://junglewise.ai/threats/cve-2026-72647-elasticsearch-uncontrolled-recursion-denial-of-service"},{"cve":"CVE-2026-72645","cvss":6.5,"epss":0.0042,"slug":"cve-2026-72645-elastic-elasticsearch-memory-allocation-denial-of-service","title":"Elastic Elasticsearch memory allocation denial of service","severity":"medium","exploited":false,"published_at":"2026-08-13T20:17:24.927+00:00","url":"https://junglewise.ai/threats/cve-2026-72645-elastic-elasticsearch-memory-allocation-denial-of-service"},{"cve":"CVE-2026-72639","cvss":6.5,"epss":0.0042,"slug":"cve-2026-72639-elasticsearch-memory-exhaustion-in-search-highlighting","title":"Elasticsearch memory exhaustion in search highlighting","severity":"medium","exploited":false,"published_at":"2026-08-13T20:17:24.427+00:00","url":"https://junglewise.ai/threats/cve-2026-72639-elasticsearch-memory-exhaustion-in-search-highlighting"}],"generated_at":"2026-09-26T15:07:00.181821+00:00"}