Skip to content
Threat Feed
Subscribe

Product

Elasticsearch 9.4.x (Prior to 9.4.4)

1 brief RSS
medium advisory

Multiple Vulnerabilities in Elastic Products

CERT-FR has issued an advisory detailing multiple vulnerabilities in Elastic products, including CVE-2026-42397 and CVE-2026-49092, which could allow an attacker to cause remote denial of service, compromise data confidentiality and integrity, and perform Server-Side Request Forgery (SSRF).

Elasticsearch 8.x +5 vulnerability elastic elasticsearch kibana data-integrity data-confidentiality denial-of-service ssrf
5c