Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Elasticsearch Component: Packetbeat Clear all filters
TI-2026-21420 CVE-2026-26933 · GHSA-27qj-9gvp-8rh9

Improper Validation of Array Index in Packetbeat Leading to Denial of Service

Priority LOW 25

Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of Service via Input Data Manipulation (CAPEC-153).

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00238 Published 2026-03-19 Fixed in 7.0.0-alpha2.0.20260126223743-dec1b31111ec CWE-129
TI-2025-41958 CVE-2025-68382 · GHSA-f3fv-24f6-354v

Packetbeat Out-of-bounds Read

Priority LOW 28

Out-of-bounds read (CWE-125) allows an unauthenticated remote attacker to perform a buffer overflow (CAPEC-100) via the NFS protocol dissector, leading to a denial-of-service (DoS) through a reliable process crash when h…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00248 Published 2025-12-18 No fix listed CWE-125
TI-2025-41957 CVE-2025-68381 · GHSA-9gqx-7h84-8hg2

Packetbeat Improper Bounds Check

Priority LOW 29

Improper Bounds Check (CWE-787) in Packetbeat can allow a remote unauthenticated attacker to exploit a Buffer Overflow (CAPEC-100) and reliably crash the application or cause significant resource exhaustion via a single…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00458 Published 2025-12-18 No fix listed CWE-787
TI-2025-41964 CVE-2025-68388 · GHSA-fj69-23m4-ccvv

Resource allocation without limits in Elastic Packetbeat

Priority LOW 30

Allocation of resources without limits or throttling (CWE-770) allows an unauthenticated remote attacker to cause excessive allocation (CAPEC-130) of memory and CPU via the integration of malicious IPv4 fragments, leadin…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00412 Published 2025-12-18 Fixed in 8.19.9, 9.1.9 +2 CWE-770