Elastic security advisory (AV26-1021)
Canada's Cyber Centre warns Elasticsearch and Kibana users to install Elastic updates ESA-2026-185 and ESA-2026-187.
Stories per day · 30 days
4 RSS
6 stories, newest first · one card per story
Stories tagged #elasticsearch
Elastic Patches 14 Security Flaws, Including One Enabling Cross-Tenant Data Interception
Elastic patched 14 flaws, including a Kibana bypass that can intercept another tenant's data.
8
Design and Evaluation of a Controlled Post-Alert Incident Orchestration and Response Subsystem Using a Rule Engine and a Local Large Language Model
Researchers evaluate a rule-engine and local-LLM incident response subsystem with human approval and safety controls.
Update modules/auxiliary/scanner/http/elasticsearch_tika_xfa_xxe.rb
Rapid7 updated a Metasploit auxiliary scanner module that detects XML external entity injection in Elasticsearch via Apache Tika.
Massive Vietnam-Linked APIS Database Exposes Passport and Flight Data
Exposed Vietnam-linked APIS database held 220.8 million passenger and crew records with passport and flight data from January 2017 to April 2026.
220 million traveler records exposed in Vietnam-linked APIS leak
Vietnam-linked APIS Elasticsearch leak exposed 220 million passenger and crew records with passport numbers and flight details spanning 2017 to 2026.