CVE-2026-63140

score

0.1

cvss

6.5

epss

0.4%

published

2026-07-21

kev added

—

first seen

2026-10-21

Elasticsearch contains a reachable assertion vulnerability caused by a null value in a specific query clause during search request parsing, letting low-privileged authenticated users cause denial of service by terminating node processes.