https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T20:59:47.959193+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-elasticsearch-2026-63144 BIT-elasticsearch-2026-63144 — Uncontrolled Recursion in Elasticsearch Leading to Denial of Service 2026-10-06T20:59:48.018991+00:00

Affected: Bitnami: elasticsearch

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user. A user with read-level index access can submit a request that triggers unbounded recursive processing within the Elasticsearch query evaluation component, causing a fatal error that terminates the affected node. In single-node deployments, this results in complete service outage; in multi-node clusters, it causes repeated node restarts and sustained availability degradation.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0906 certfr-2026-avi-0906 — De multiples vulnérabilités ont été découvertes dans les produits Elastic. Certaines d'entre elles permettent à un atta… 2026-10-06T20:59:48.019048+00:00 certfr-2026-avi-0906 https://cve.radiocsirt.org/vuln/cleanstart-2026-gg06012 CLEANSTART-2026-GG06012 — Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request… 2026-10-06T20:59:48.019069+00:00

Affected: CleanStart: sonarqube

Security vulnerability affects the sonarqube package. Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user.

 https://cve.radiocsirt.org/vuln/euvd-2026-339324 EUVD-2026-339324 2026-10-06T20:59:48.019091+00:00 EUVD-2026-339324 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63144 fkie_cve-2026-63144 2026-10-06T20:59:48.019104+00:00

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user. A user with read-level index access can submit a request that triggers unbounded recursive processing within the Elasticsearch query evaluation component, causing a fatal error that terminates the affected node. In single-node deployments, this results in complete service outage; in multi-node clusters, it causes repeated node restarts and sustained availability degradation.

 https://cve.radiocsirt.org/vuln/ghsa-5v5g-hvw6-x2x7 GHSA-5v5g-hvw6-x2x7 2026-10-06T20:59:48.019126+00:00

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user. A user with read-level index access can submit a request that triggers unbounded recursive processing within the Elasticsearch query evaluation component, causing a fatal error that terminates the affected node. In single-node deployments, this results in complete service outage; in multi-node clusters, it causes repeated node restarts and sustained availability degradation.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-63144 msrc_CVE-2026-63144 — Uncontrolled Recursion in Elasticsearch Leading to Denial of Service 2026-10-06T20:59:48.019142+00:00 msrc_CVE-2026-63144 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2457 WID-SEC-W-2026-2457 — Elasticsearch: Mehrere Schwachstellen ermöglichen DoS und die Offenlegung von Informationen 2026-10-06T20:59:48.019156+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Elasticsearch ausnutzen, um einen Denial of Service Angriff durchzuführen und vertrauliche Informationen offenzulegen.