How many vulnerabilities affect Elasticsearch?

There are currently 101 known vulnerabilities (CVEs) affecting Elasticsearch tracked in the Strobes VI database.

Are there exploits available for Elasticsearch vulnerabilities?

Some vulnerabilities affecting Elasticsearch have known public exploits. Check individual CVE pages for exploit details and mitigation guidance.

How should I prioritize Elasticsearch vulnerabilities?

Prioritize based on Strobes Priority Score, which combines CVSS severity, EPSS exploitation probability, exploit availability, and patch status. Focus first on vulnerabilities with high Priority Scores and available exploits.

CVE ID	Description	CVSS	Priority	Trend	Exploit	Patch

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001

Elasticsearch Vulnerabilities

Known vulnerabilities affecting Elasticsearch products and systems

Total: 101 vulnerabilitiesPage 1

CVE ID	Description	CVSS	Priority	Trend	Exploit	Patch
CVE-2026-78607	Missing Authorization (CWE-862) in the Elasticsearch custom inference service can lead to information disclosure via Privilege Abuse (CAPEC-122). A user holding only inference execution privileges cou...	7.1

Showing 1 - 20 of 101