Elastic security advisory (AV26-1021)
Canada's Cyber Centre warns Elasticsearch and Kibana users to install Elastic updates ESA-2026-185 and ESA-2026-187.
36
Product
Elasticsearch
- Mentions · 7d0
- Mentions · 30d4
- All mentions9
- First seenAug 17, 2026
- Last mentioned22d ago
Timeline
9 articles · newest firstElastic Fixes 14 Security Flaws Including One That Lets Attackers Intercept Other Users’ Data
Elastic patched 14 flaws, including a CVSS 8.8 Kibana bug letting Fleet users intercept other tenants' data.
64
Elastic Patches 14 Security Flaws, Including One Enabling Cross-Tenant Data Interception
Elastic patched 14 flaws, including a Kibana bypass that can intercept another tenant's data.
66
TTY Logs and the Data it Captures, (Sun, Oct 4th)
SANS diary correlates DShield honeypot TTY logs, finding one crontab pattern used by over 3,130 IPs.
32
Design and Evaluation of a Controlled Post-Alert Incident Orchestration and Response Subsystem Using a Rule Engine and a Local Large Language Model
Researchers evaluate a rule-engine and local-LLM incident response subsystem with human approval and safety controls.
36
Update modules/auxiliary/scanner/http/elasticsearch_tika_xfa_xxe.rb
Rapid7 updated a Metasploit auxiliary scanner module that detects XML external entity injection in Elasticsearch via Apache Tika.
18
Massive Vietnam-Linked APIS Database Exposes Passport and Flight Data
Exposed Vietnam-linked APIS database held 220.8 million passenger and crew records with passport and flight data from January 2017 to April 2026.
82
Data access: the hidden cost of security vendor lock-in
Elastic compares SIEM data egress cost, latency, and fidelity across CrowdStrike, Microsoft, Google, and Splunk, arguing vendors engineer lock-in.
24
Another Apache Log4j Vulnerability Is Actively Exploited in the Wild (CVE-2021
Apache Log4j 2 RCE CVE-2021-44228 is actively exploited via crafted JNDI lookups; Palo Alto Unit 42 urges upgrading to Log4j 2.17.1.
92
Related CVEs
by mentions- Kibana Fleet authorization bypass allows cross-tenant interception
- Authorization bypass in Elasticsearch cross-cluster search
- Uncontrolled recursion DoS in Elasticsearch geometry scripts
- Authenticated query DoS via memory exhaustion in Elasticsearch
- Uncaught exception DoS in Elastic Endpoint on Windows
- CVE-2021-44228100%10.0JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)
- CVE-2021-45046100%9.0Remote Code Execution in Apache Log4j2 via Incomplete Log4Shell Fix
- CVE-2019-1757169%9.8Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code…
- CVE-2021-4483298%6.6Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when…
- CVE-2021-45105100%5.9Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups
Appears with
- Elasticvendor · 4
- Elasticorganization · 3
- Kibanaproduct · 3
- Palo Alto Networksvendor · 2
- Elastic Agentproduct · 2
- Elastic Endpointproduct · 2
- Cowrieproduct · 1
- Apachevendor · 1
- SANS Internet Storm Centerorganization · 1
- Splunkproduct · 1
- Sentinelproduct · 1
- Viettelorganization · 1
- Kinryū Labsvendor · 1
- Elastic Cloudproduct · 1
- Palo Alto Networksorganization · 1
- Apache Log4jvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.