CVE-2026-82294

Summary

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130).

Affected Software

VendorProductVersion RangeStatus
ElasticElasticsearch8.0.0 <= 8.19.20affected
ElasticElasticsearch9.0.0 <= 9.4.5affected
ElasticElasticsearch9.5.0 <= 9.5.2affected

Weaknesses

  • CWE-400: CWE-400 Uncontrolled Resource Consumption

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References