A flaw was found in Elasticsearch. An authenticated remote attacker can exploit an uncontrolled resource consumption issue by submitting requests that trigger excessive allocation of system resources. This can exhaust available capacity, resulting in a Denial of Service (DoS) where the service becomes unresponsive or crashes.
Last checked: 2026-09-29 20:36 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-26 22:59 UTC)
Fix evidence last checked: 2026-09-28 11:58 UTC