https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T20:49:16.744554+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-elasticsearch-2026-72638 BIT-elasticsearch-2026-72638 — Uncontrolled Recursion in Elasticsearch Leading to Denial of Service 2026-10-06T20:49:16.813984+00:00

Affected: Bitnami: elasticsearch

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153). An authenticated user holding only low-privileged index creation permissions can submit a single request containing a specially crafted, malformed custom analysis definition that is resolved recursively without a cycle or depth check, exhausting the thread stack and terminating the affected node.

 https://cve.radiocsirt.org/vuln/cleanstart-2026-pp64708 CLEANSTART-2026-PP64708 — Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153) 2026-10-06T20:49:16.814051+00:00

Affected: CleanStart: sonarqube

Security vulnerability affects the sonarqube package. Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153).

 https://cve.radiocsirt.org/vuln/euvd-2026-352327 EUVD-2026-352327 2026-10-06T20:49:16.814086+00:00 EUVD-2026-352327 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72638 fkie_cve-2026-72638 2026-10-06T20:49:16.814108+00:00

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153). An authenticated user holding only low-privileged index creation permissions can submit a single request containing a specially crafted, malformed custom analysis definition that is resolved recursively without a cycle or depth check, exhausting the thread stack and terminating the affected node.

 https://cve.radiocsirt.org/vuln/ghsa-rx34-f5m9-h9p5 GHSA-rx34-f5m9-h9p5 2026-10-06T20:49:16.814141+00:00

Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153). An authenticated user holding only low-privileged index creation permissions can submit a single request containing a specially crafted, malformed custom analysis definition that is resolved recursively without a cycle or depth check, exhausting the thread stack and terminating the affected node.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-72638 msrc_CVE-2026-72638 — Uncontrolled Recursion in Elasticsearch Leading to Denial of Service 2026-10-06T20:49:16.814166+00:00 msrc_CVE-2026-72638 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2841 WID-SEC-W-2026-2841 — Elasticsearch: Mehrere Schwachstellen 2026-10-06T20:49:16.814190+00:00

Ein Angreifer kann mehrere Schwachstellen in Elasticsearch ausnutzen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.