https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:42:01 +0000 https://cve.radiocsirt.org/vuln/bit-elasticsearch-2026-72647 <p><strong>Affected:</strong> Bitnami: elasticsearch</p> <p>Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An authenticated user holding only read privileges on a single index can submit one specially crafted search request whose deeply nested structure is processed without a depth limit, exhausting the thread stack and terminating the affected node.</p> <p><strong>Affected:</strong> Bitnami: elasticsearch</p> <p>Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An authenticated user holding only read privileges on a single index can submit one specially crafted search request whose deeply nested structure is processed without a depth limit, exhausting the thread stack and terminating the affected node.</p> https://cve.radiocsirt.org/vuln/bit-elasticsearch-2026-72647 https://cve.radiocsirt.org/vuln/euvd-2026-352328 EUVD-2026-352328 https://cve.radiocsirt.org/vuln/euvd-2026-352328 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72647 <p>Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An authenticated user holding only read privileges on a single index can submit one specially crafted search request whose deeply nested structure is processed without a depth limit, exhausting the thread stack and terminating the affected node.</p> <p>Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An authenticated user holding only read privileges on a single index can submit one specially crafted search request whose deeply nested structure is processed without a depth limit, exhausting the thread stack and terminating the affected node.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-72647 https://cve.radiocsirt.org/vuln/ghsa-2qv5-xh6q-23wv <p>Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An authenticated user holding only read privileges on a single index can submit one specially crafted search request whose deeply nested structure is processed without a depth limit, exhausting the thread stack and terminating the affected node.</p> <p>Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An authenticated user holding only read privileges on a single index can submit one specially crafted search request whose deeply nested structure is processed without a depth limit, exhausting the thread stack and terminating the affected node.</p> https://cve.radiocsirt.org/vuln/ghsa-2qv5-xh6q-23wv https://cve.radiocsirt.org/vuln/msrc_cve-2026-72647 msrc_CVE-2026-72647 https://cve.radiocsirt.org/vuln/msrc_cve-2026-72647 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2841 <p>Ein Angreifer kann mehrere Schwachstellen in Elasticsearch ausnutzen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Elasticsearch ausnutzen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2841