https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:30:48.084362+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-elasticsearch-2026-63263 BIT-elasticsearch-2026-63263 — Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service 2026-10-06T22:30:48.109642+00:00

Affected: Bitnami: elasticsearch

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197). An authenticated user may submit a specially crafted query to the ES|QL engine that causes exponential CPU consumption during query evaluation. Because the resource exhaustion persists beyond query completion, repeated requests can fully exhaust the available query worker resources, rendering ES|QL queries unavailable until the node is restarted.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0906 certfr-2026-avi-0906 — De multiples vulnérabilités ont été découvertes dans les produits Elastic. Certaines d'entre elles permettent à un atta… 2026-10-06T22:30:48.109698+00:00 certfr-2026-avi-0906 https://cve.radiocsirt.org/vuln/cleanstart-2026-jm55948 CLEANSTART-2026-JM55948 — Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansi… 2026-10-06T22:30:48.109720+00:00

Affected: CleanStart: sonarqube

Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197).

 https://cve.radiocsirt.org/vuln/euvd-2026-339309 EUVD-2026-339309 2026-10-06T22:30:48.109743+00:00 EUVD-2026-339309 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63263 fkie_cve-2026-63263 2026-10-06T22:30:48.109756+00:00

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197). An authenticated user may submit a specially crafted query to the ES|QL engine that causes exponential CPU consumption during query evaluation. Because the resource exhaustion persists beyond query completion, repeated requests can fully exhaust the available query worker resources, rendering ES|QL queries unavailable until the node is restarted.

 https://cve.radiocsirt.org/vuln/ghsa-727x-48vv-8cj7 GHSA-727x-48vv-8cj7 2026-10-06T22:30:48.109778+00:00

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197). An authenticated user may submit a specially crafted query to the ES|QL engine that causes exponential CPU consumption during query evaluation. Because the resource exhaustion persists beyond query completion, repeated requests can fully exhaust the available query worker resources, rendering ES|QL queries unavailable until the node is restarted.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-63263 msrc_CVE-2026-63263 — Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service 2026-10-06T22:30:48.109793+00:00 msrc_CVE-2026-63263 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2457 WID-SEC-W-2026-2457 — Elasticsearch: Mehrere Schwachstellen ermöglichen DoS und die Offenlegung von Informationen 2026-10-06T22:30:48.109808+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Elasticsearch ausnutzen, um einen Denial of Service Angriff durchzuführen und vertrauliche Informationen offenzulegen.