CVE-2026-72685mediumCWE-407

CVE-2026-72685: falha de média gravidade em Elasticsearch

Inefficient Algorithmic Complexity in Elasticsearch Leading to Denial of Service

Publicada em

Seguir esta CVE+ Monitorar Elasticsearch

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.4%
A flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input. Processing one such document occupies a worker thread from a bounded pool for a disproportionate amount of time, degrading the availability of indexing operations on the affected node.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Produtos afetados
Elastic · Elasticsearch
CVEs relacionadas — Elasticsearch

No mesmo produto, das mais perigosas para as menos.

CVE-2021-22145—CVE-2021-22145EPSS 76.2%CVE-2023-31419MEDIUMElasticsearch StackOverflow vulnerabilityEPSS 61.1%CVE-2019-7619—CVE-2019-7619EPSS 2.4%CVE-2019-7611—CVE-2019-7611EPSS 2.1%CVE-2023-31418HIGHElasticsearch uncontrolled resource consumptionEPSS 2.1%CVE-2018-3831—CVE-2018-3831EPSS 2.0%