Skip to content

CVE record · 1 source

CVE-2026-103009

CVSS 7.1

Authorization Bypass Through User-Controlled Key (CWE-639) in Elasticsearch can lead to Information Disclosure via a specially crafted cross-cluster…

Vendor: Elastic
Product: Elasticsearch / Kibana
CVSS: 7.1
Exposure class: Database

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

15

CVE NVD 25d ago

Authorization Bypass Through User-Controlled Key (CWE-639) in Elasticsearch can lead to Information Disclosure via a specially crafted cross-cluster…

Authorization Bypass Through User-Controlled Key (CWE-639) in Elasticsearch can lead to Information Disclosure via a specially crafted cross-cluster search request that references an unauthorized shard identifier. Elasticsearch…

CVSS 7.1 CVE-2026-103009 Elastic