https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:52:13.397779+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-elasticsearch-2026-72656 BIT-elasticsearch-2026-72656 — Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service 2026-10-03T16:52:13.463610+00:00

Affected: Bitnami: elasticsearch

Memory Allocation with Excessive Size Value (CWE-789) in the ES|QL query processing of Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user able to submit ES|QL queries could send a specially crafted query whose evaluation allocates an unbounded amount of heap memory, exhausting the available heap on the receiving node and causing the node to become unavailable.

 https://cve.radiocsirt.org/vuln/euvd-2026-352332 EUVD-2026-352332 2026-10-03T16:52:13.463670+00:00 EUVD-2026-352332 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72656 fkie_cve-2026-72656 2026-10-03T16:52:13.463688+00:00

Memory Allocation with Excessive Size Value (CWE-789) in the ES|QL query processing of Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user able to submit ES|QL queries could send a specially crafted query whose evaluation allocates an unbounded amount of heap memory, exhausting the available heap on the receiving node and causing the node to become unavailable.

 https://cve.radiocsirt.org/vuln/ghsa-gpg2-7m3g-5qc5 GHSA-gpg2-7m3g-5qc5 2026-10-03T16:52:13.463713+00:00

Memory Allocation with Excessive Size Value (CWE-789) in the ES|QL query processing of Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user able to submit ES|QL queries could send a specially crafted query whose evaluation allocates an unbounded amount of heap memory, exhausting the available heap on the receiving node and causing the node to become unavailable.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2841 WID-SEC-W-2026-2841 — Elasticsearch: Mehrere Schwachstellen 2026-10-03T16:52:13.463730+00:00

Ein Angreifer kann mehrere Schwachstellen in Elasticsearch ausnutzen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.