Elasticsearch: Mehrere Schwachstellen ermöglichen Denial of Service
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in Elasticsearch ausnutzen, um einen Denial of Service Angriff durchzuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Mediumbsi:WID-SEC-2026-35737 linked CVEs
Open advisory with all CVEs
More on Elasticsearch
Other advisories
- MediumCVE-2026-115715Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
- MediumCVE-2026-115710Use of Cache Containing Sensitive Information in Elasticsearch Leading to Information Disclosure
- MediumCVE-2026-115298Incorrect Authorization in Elasticsearch Leading to Information Disclosure
- HighCVE-2026-115710Elasticsearch: Mehrere Schwachstellen
- Not ratedosv:CVE-2026-46487GeoNetwork: ACL bypass on Elasticsearch search when request body omits query field
- MediumCVE-2026-115715Elasticsearch: Ressourcenzuweisung ohne Begrenzung
- Not ratedosv:AZL-112655CVE-2026-115715 affecting package rubygem-elasticsearch 8.9.0-1
- MediumCVE-2026-115710Elasticsearch: vertrauliche Informationen im Cache
Other news entries
- Elasticsearch: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Elasticsearch: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Elasticsearch: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Elasticsearch: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Elasticsearch: Mehrere Schwachstellen ermöglichen Denial of ServiceVulnerabilityBSI CERT-Bund
- Elasticsearch: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Elasticsearch: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Elasticsearch und Kibana: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3573
ID