Beveiligingsadvies

CVE-2026-63136

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-21 20:20:07
Laatst bijgewerkt 2026-07-22 19:41:00
Toegewezen door elastic
CVSS-score 6.5
Status PUBLISHED

Beschrijving

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A user with search privileges can submit a specially crafted search request that causes a data node to exhaust available heap memory, resulting in node unavailability and cluster degradation. An attacker could leverage this vulnerability to cause cluster downtime requiring manual intervention to restore service.