https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T01:18:38.432658+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-elasticsearch-2025-68384 BIT-elasticsearch-2025-68384 — Elasticsearch Allocation of Resources Without Limits or Throttling 2026-10-07T01:18:38.441988+00:00

Affected: Bitnami: elasticsearch

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) causing a persistent denial of service (OOM crash) via submission of oversized user settings data.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1123 certfr-2025-avi-1123 — De multiples vulnérabilités ont été découvertes dans les produits Elastic. Certaines d'entre elles permettent à un atta… 2026-10-07T01:18:38.442055+00:00 certfr-2025-avi-1123 https://cve.radiocsirt.org/vuln/cleanstart-2026-nd94120 CLEANSTART-2026-ND94120 — Security fix for CVE-2025-68384 applied in: sonarqube 25.12.0.117093-r2, sonarqube 26.3.0.120487-r0 2026-10-07T01:18:38.442092+00:00

Affected: CleanStart: sonarqube

CVE-2025-68384 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-264147 EUVD-2026-264147 2026-10-07T01:18:38.442135+00:00 EUVD-2026-264147 https://cve.radiocsirt.org/vuln/fkie_cve-2025-68384 fkie_cve-2025-68384 2026-10-07T01:18:38.442157+00:00

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) causing a persistent denial of service (OOM crash) via submission of oversized user settings data.

 https://cve.radiocsirt.org/vuln/ghsa-qf7c-7r9h-mm92 GHSA-qf7c-7r9h-mm92 — Elasticsearch has Excessive Allocation of Resources via Submission of Oversized User Settings Data 2026-10-07T01:18:38.442198+00:00

Affected: Maven: org.elasticsearch.plugin:x-pack-security

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) causing a persistent denial of service (OOM crash) via submission of oversized user settings data.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-68384 msrc_CVE-2025-68384 — Elasticsearch Allocation of Resources Without Limits or Throttling 2026-10-07T01:18:38.442237+00:00 msrc_CVE-2025-68384 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-68384 UBUNTU-CVE-2025-68384 2026-10-07T01:18:38.442263+00:00

Affected: Ubuntu:16.04:LTS: elasticsearch

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) causing a persistent denial of service (OOM crash) via submission of oversized user settings data.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2896 WID-SEC-W-2025-2896 — Elasticsearch: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-07T01:18:38.442293+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Elasticsearch ausnutzen, um einen Denial of Service Angriff durchzuführen.