LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor

Elastic

23 CVEs published in the last four months and 5 stories. Exploited flaws first.

Critical0
High20
Medium3
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-726498.8highelasticsearchDeserialization of Untrusted Data (CWE-502) in the Elasticsearch machine learning component can lead to remote cod50d ago
CVE-2026-726428.8highelasticsearchThe native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model 69d ago
CVE-2026-631378.3highkibanaIncorrect Authorization (CWE-863) in Kibana can lead to privilege escalation via Exploiting Incorrectly Configured50d ago
CVE-2026-726658.1highkibanaMissing Authorization (CWE-862) in Kibana can lead to unauthorized execution of Osquery and Elastic Defend respons69d ago
CVE-2026-490918highkibanaImproper Output Neutralization for Logs (CWE-117) in Kibana can lead to log injection via Log Injection-Tampering-112d ago
CVE-2026-786047.8highelastic agentIncorrect Permission Assignment for Critical Resource (CWE-732) in Elastic Agent can lead to local privilege escal49d ago
CVE-2026-726727.7highkibanaThe Elastic Security capability that suggests existing field values while a user authors endpoint policy artifacts69d ago
CVE-2026-423987.7highkibanaServer-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to146d ago
CVE-2026-726707.7highkibanaA lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a69d ago
CVE-2026-726697.6highkibanaThe state that Kibana stores for an Observability Onboarding flow is not bound to the user who created the flow, a69d ago
CVE-2026-726587.3highkibanaCross-Site Request Forgery (CWE-352) in Kibana can lead to privilege escalation via Cross Site Request Forgery (CA69d ago
CVE-2026-726777.3highkibanaRelative Path Traversal (CWE-23) in Kibana can lead to the unauthorized deletion of Kibana resources via Relative 69d ago
CVE-2026-785927.3highkibanaImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in Kibana can lead to the 50d ago
CVE-2026-785907.3highkibanaImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet featur49d ago
CVE-2026-726327.1highkibanaObservable Discrepancy (CWE-203) in Kibana Fleet can lead to information disclosure via Excavation (CAPEC-116).69d ago
CVE-2026-726297.1highkibanaAuthorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized cross-space access v69d ago
CVE-2026-726757.1highkibanaMissing Authorization (CWE-862) in Kibana can lead to cross-space information disclosure and unauthorized data mod69d ago
CVE-2026-561477.1highkibanaAuthorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized information disclosu92d ago
CVE-2026-726437.1highkibanaKibana Agent Builder determines whether a caller owns a private agent by comparing a stable user identifier when o69d ago
CVE-2026-726307.1highkibanaIncorrect Authorization (CWE-863) in Kibana Fleet can lead to privilege escalation via Privilege Abuse (CAPEC-122)69d ago
CVE-2026-269396.5mediumkibanaMissing Authorization (CWE-862) in Kibana’s server-side Detection Rule Management can lead to Unauthorized Endpoin216d ago
CVE-2026-269406.5mediumkibanaImproper Validation of Specified Quantity in Input (CWE-1284) in the Timelion visualization plugin in Kibana can l216d ago
CVE-2026-269315.7mediummetricbeatMemory Allocation with Excessive Size Value (CWE-789) in the Prometheus remote_write HTTP handler in Metricbeat ca216d ago

Filter the full tracker by Elastic →

Our coverage of Elastic

npm

The security signal log tailing can't see: tracking npm cooldown removals with Elastic Agent

Elastic has developed a new detection engineering method to track the removal of the `min-release-age` setting from `.npmrc` files on developer workstations. This setting, available since npm version 11.10, is designed to prevent the installation of recently published package versions, mitigating supply chain attacks such as Compromise Software Dependencies and Development Tools (T1195.001).

vulnerability

Elastic goes all-in on Hacker Summer Camp at Black Hat and DEF CON in Las Vegas

Elastic has announced significant updates to its security offerings, focusing on reducing analyst workload and improving detection and prevention capabilities. These enhancements, which include advancements to Attack Discovery, Elastic Defend, and Elastic Workflows, aim to streamline security operations and move towards what the company calls "Alert Zero."

sochigh

Inside Elastic InfoSec's agentic SOC: cutting alert triage from 30 minutes to under 3

Elastic's security team has developed an "agentic" Security Operations Center (SOC) that automates alert investigation, significantly reducing the time it takes to triage security alerts. This new system can process alerts in under three minutes, a drastic improvement from the previous 30-minute manual triage time. The approach leverages Elastic's native technology stack, including Elastic…

ai

From vulnerability report to CVE draft in minutes: how Elastic automated security advisories with AI

Elastic's InfoSec Product Security Team has developed a generative AI agent to automate the drafting of security advisories, significantly reducing the time required to process vulnerability reports. This new system leverages Retrieval-Augmented Generation (RAG) against MITRE's Common Weakness Enumeration (CWE) and Common Attack Pattern Enumeration and Classification (CAPEC) catalogs, which…

threat intelligence

From API key to live threat detections in minutes: how Elastic Security ingests Google Threat Intelligence

Elastic Security now offers native integration with Google Threat Intelligence (GTI), allowing security teams to ingest known malicious indicators and leverage AI-driven workflows for real-time alert enrichment and investigation. This integration aims to streamline the process from initial setup to live threat detection within minutes.