CVE-2026-102404

score

0.5

cvss

6.5

epss

0.3%

published

2026-10-06

kev added

—

first seen

2026-10-21

Elasticsearch contains an uncontrolled resource consumption vulnerability caused by excessive memory allocation in the query processing engine, letting low-privileged authenticated users cause denial of service via out-of-memory conditions, exploit requires authenticated low-privileged user.