CVE-2026-94398 — Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service

CVE-2026-94398

Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service PUBLISHED

Description (CNA)

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130)

Vendor / product	Versions
Elastic / Elasticsearch	affected 8.12.0 through 8.19.21; affected 9.0.0 through 9.4.6; affected 9.5.0 through 9.5.3

CWE-400

CISA-ADP

No English description supplied.

No references supplied.