CVE-2026-115290 in Elasticsearch
الملخص
بحسب MITRE • 03/11/2026
Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An unauthenticated attacker with network access to the remote cluster server interface of a node can send a specially crafted request that causes the node to terminate. No credentials are required. The attacker can repeat the request against each reachable node.
Once again VulDB remains the best source for vulnerability data.