CVE-2026-72645

score

0.1

cvss

6.5

epss

0.4%

published

2026-08-13

kev added

—

first seen

2026-10-21

Elasticsearch contains a denial of service vulnerability caused by excessive memory allocation in search requests, letting authenticated users with read privileges exhaust JVM heap and terminate nodes, exploit requires read access on an index.