Skip to content
Threat Feed
Subscribe

Tag

Elasticsearch

4 briefs RSS
medium advisory

Multiple Vulnerabilities in Elastic Products

CERT-FR has issued an advisory detailing multiple vulnerabilities in Elastic products, including CVE-2026-42397 and CVE-2026-49092, which could allow an attacker to cause remote denial of service, compromise data confidentiality and integrity, and perform Server-Side Request Forgery (SSRF).

Elasticsearch 8.x +5 vulnerability elastic elasticsearch kibana data-integrity data-confidentiality denial-of-service ssrf
5c
high advisory

Remote Code Execution via eval() in django-haystack Elasticsearch Deserialization

A critical remote code execution (RCE) vulnerability in the Elasticsearch backend of django-haystack allows attackers to execute arbitrary Python commands by manipulating `SearchField` aliases and indexed content, leading to full compromise of the Django application.

django-haystack rce python django elasticsearch deserialization supply-chain
1r 2t 2i
high advisory

GeoNetwork ACL Bypass in Elasticsearch Search (CVE-2026-46487)

A high-severity authorization bypass vulnerability, CVE-2026-46487, in GeoNetwork's Elasticsearch-backed search API allows unauthenticated attackers to retrieve restricted metadata records by bypassing access control and visibility filters when the request body omits the 'query' field, leading to sensitive information disclosure.

GeoNetwork +2 authorization-bypass information-disclosure web-vulnerability elasticsearch ghsa
3t
medium advisory

Unsecured Elasticsearch Node Inbound Connection

This rule identifies potentially unsecured Elasticsearch nodes that lack TLS and/or authentication and are accepting inbound network connections, which could allow adversaries to gain initial access, exfiltrate data, or disrupt services.

Elasticsearch initial-access reconnaissance network
2r 2t