Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-49090

Опубликовано: 01 июл. 2026
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially crafted bulk request that causes sustained high CPU consumption, which can render the affected node unable to process requests.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*
Версия от 7.0.0 (включая) до 7.17.24 (исключая)
cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*
Версия от 8.0.0 (включая) до 8.15.0 (исключая)

EPSS

Процентиль: 17%
0.00251
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 1 месяца назад

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially crafted bulk request that causes sustained high CPU consumption, which can render the affected node unable to process requests.

msrc
около 1 месяца назад

Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

CVSS3: 6.5
github
около 1 месяца назад

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially crafted bulk request that causes sustained high CPU consumption, which can render the affected node unable to process requests.

EPSS

Процентиль: 17%
0.00251
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-400