https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:00:16 +0000 https://cve.radiocsirt.org/vuln/bit-elasticsearch-2026-72686 <p><strong>Affected:</strong> Bitnami: elasticsearch</p> <p>A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input. A specific internal component validates the input using a recursive routine and applies no bound to the length of the value being validated, so the validation causes the thread to exhaust its stack. The resulting fatal error is not handled by the surrounding execution paths and terminates the affected node process, producing a denial of service.</p> <p><strong>Affected:</strong> Bitnami: elasticsearch</p> <p>A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input. A specific internal component validates the input using a recursive routine and applies no bound to the length of the value being validated, so the validation causes the thread to exhaust its stack. The resulting fatal error is not handled by the surrounding execution paths and terminates the affected node process, producing a denial of service.</p> https://cve.radiocsirt.org/vuln/bit-elasticsearch-2026-72686 https://cve.radiocsirt.org/vuln/euvd-2026-352355 EUVD-2026-352355 https://cve.radiocsirt.org/vuln/euvd-2026-352355 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72686 <p>A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input. A specific internal component validates the input using a recursive routine and applies no bound to the length of the value being validated, so the validation causes the thread to exhaust its stack. The resulting fatal error is not handled by the surrounding execution paths and terminates the affected node process, producing a denial of service.</p> <p>A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input. A specific internal component validates the input using a recursive routine and applies no bound to the length of the value being validated, so the validation causes the thread to exhaust its stack. The resulting fatal error is not handled by the surrounding execution paths and terminates the affected node process, producing a denial of service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-72686 https://cve.radiocsirt.org/vuln/ghsa-qj5v-cq2v-qvgj <p>A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input. A specific internal component validates the input using a recursive routine and applies no bound to the length of the value being validated, so the validation causes the thread to exhaust its stack. The resulting fatal error is not handled by the surrounding execution paths and terminates the affected node process, producing a denial of service.</p> <p>A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input. A specific internal component validates the input using a recursive routine and applies no bound to the length of the value being validated, so the validation causes the thread to exhaust its stack. The resulting fatal error is not handled by the surrounding execution paths and terminates the affected node process, producing a denial of service.</p> https://cve.radiocsirt.org/vuln/ghsa-qj5v-cq2v-qvgj https://cve.radiocsirt.org/vuln/msrc_cve-2026-72686 msrc_CVE-2026-72686 https://cve.radiocsirt.org/vuln/msrc_cve-2026-72686 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2841 <p>Ein Angreifer kann mehrere Schwachstellen in Elasticsearch ausnutzen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Elasticsearch ausnutzen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2841