https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:04:25 +0000 https://cve.radiocsirt.org/vuln/bit-elasticsearch-2026-72684 <p><strong>Affected:</strong> Bitnami: elasticsearch</p> <p>A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input. Processing that input causes a specific internal component to allocate memory without any upper bound, and the allocation occurs outside the scope of the existing memory accounting controls that were intended to constrain it. The resulting out-of-memory condition is fatal and terminates the affected node process, causing a denial of service.</p> <p><strong>Affected:</strong> Bitnami: elasticsearch</p> <p>A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input. Processing that input causes a specific internal component to allocate memory without any upper bound, and the allocation occurs outside the scope of the existing memory accounting controls that were intended to constrain it. The resulting out-of-memory condition is fatal and terminates the affected node process, causing a denial of service.</p> https://cve.radiocsirt.org/vuln/bit-elasticsearch-2026-72684 https://cve.radiocsirt.org/vuln/euvd-2026-352357 EUVD-2026-352357 https://cve.radiocsirt.org/vuln/euvd-2026-352357 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72684 <p>A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input. Processing that input causes a specific internal component to allocate memory without any upper bound, and the allocation occurs outside the scope of the existing memory accounting controls that were intended to constrain it. The resulting out-of-memory condition is fatal and terminates the affected node process, causing a denial of service.</p> <p>A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input. Processing that input causes a specific internal component to allocate memory without any upper bound, and the allocation occurs outside the scope of the existing memory accounting controls that were intended to constrain it. The resulting out-of-memory condition is fatal and terminates the affected node process, causing a denial of service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-72684 https://cve.radiocsirt.org/vuln/ghsa-78xm-g482-ch2r <p>A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input. Processing that input causes a specific internal component to allocate memory without any upper bound, and the allocation occurs outside the scope of the existing memory accounting controls that were intended to constrain it. The resulting out-of-memory condition is fatal and terminates the affected node process, causing a denial of service.</p> <p>A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input. Processing that input causes a specific internal component to allocate memory without any upper bound, and the allocation occurs outside the scope of the existing memory accounting controls that were intended to constrain it. The resulting out-of-memory condition is fatal and terminates the affected node process, causing a denial of service.</p> https://cve.radiocsirt.org/vuln/ghsa-78xm-g482-ch2r https://cve.radiocsirt.org/vuln/msrc_cve-2026-72684 msrc_CVE-2026-72684 https://cve.radiocsirt.org/vuln/msrc_cve-2026-72684 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2841 <p>Ein Angreifer kann mehrere Schwachstellen in Elasticsearch ausnutzen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Elasticsearch ausnutzen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2841