https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T20:11:27.919973+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-elasticsearch-2025-68390 BIT-elasticsearch-2025-68390 — Elasticsearch Allocation of Resources Without Limits or Throttling 2026-10-07T20:11:28.006174+00:00

Affected: Bitnami: elasticsearch

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Allocation (CAPEC-130) of memory and a denial of service (DoS) via crafted HTTP request.

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1123 certfr-2025-avi-1123 — De multiples vulnérabilités ont été découvertes dans les produits Elastic. Certaines d'entre elles permettent à un atta… 2026-10-07T20:11:28.006232+00:00 certfr-2025-avi-1123 https://cve.radiocsirt.org/vuln/cleanstart-2026-ja11762 CLEANSTART-2026-JA11762 — Security fix for CVE-2025-68390 applied in: sonarqube 25.12.0.117093-r2 2026-10-07T20:11:28.006262+00:00

Affected: CleanStart: sonarqube

Security vulnerability affects the sonarqube package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-264157 EUVD-2026-264157 2026-10-07T20:11:28.006284+00:00 EUVD-2026-264157 https://cve.radiocsirt.org/vuln/fkie_cve-2025-68390 fkie_cve-2025-68390 2026-10-07T20:11:28.006297+00:00

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Allocation (CAPEC-130) of memory and a denial of service (DoS) via crafted HTTP request.

 https://cve.radiocsirt.org/vuln/ghsa-gphj-4h6p-37xq GHSA-gphj-4h6p-37xq — Elasticsearch privileged authenticated users can cause DoS through Excessive Resource Allocation 2026-10-07T20:11:28.006346+00:00

Affected: Maven: org.elasticsearch.plugin:x-pack-core

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Allocation (CAPEC-130) of memory and a denial of service (DoS) via crafted HTTP request.

 https://cve.radiocsirt.org/vuln/msrc_cve-2025-68390 msrc_CVE-2025-68390 — Elasticsearch Allocation of Resources Without Limits or Throttling 2026-10-07T20:11:28.006369+00:00 msrc_CVE-2025-68390 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-68390 UBUNTU-CVE-2025-68390 2026-10-07T20:11:28.006384+00:00

Affected: Ubuntu:16.04:LTS: elasticsearch

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Allocation (CAPEC-130) of memory and a denial of service (DoS) via crafted HTTP request.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2896 WID-SEC-W-2025-2896 — Elasticsearch: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-07T20:11:28.006417+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Elasticsearch ausnutzen, um einen Denial of Service Angriff durchzuführen.