CVE-2026-72639

score

0.1

cvss

6.5

epss

0.4%

published

2026-08-13

kev added

—

first seen

2026-10-21

Elasticsearch contains a denial of service vulnerability caused by lack of upper bound enforcement on user-supplied count in search highlighting, letting authenticated users with read privileges exhaust node memory, exploit requires authenticated read access.