A flaw was found in Elasticsearch. An authenticated remote attacker can exploit uncontrolled resource consumption to trigger excessive allocation of system resources. This issue can exhaust available memory or processing capacity, leading to a Denial of Service (DoS) where the service becomes unresponsive.
Last checked: 2026-10-01 13:30 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-26 23:00 UTC)
Fix evidence last checked: 2026-09-28 11:58 UTC