UpHeron
All vulnerabilities

Servers and applications

CVE-2026-82294

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130).

Severity
Medium 6.5
Published
26 Sept 2026
Last changed
29 Sept 2026
Added to UpHeron
21 Oct 2026
Fixed in
8.19.21, 9.4.6, 9.5.3
Sources
NVD

Affected software

SoftwareAffected versions
ElasticsearchServers and applications · cpe:a:elastic:elasticsearch
  • From 8.0.0 before 8.19.21
  • From 9.0.0 before 9.4.6
  • From 9.5.0 before 9.5.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-82294
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-82294