A vulnerability labeled as critical has been found in Elastic Elasticsearch up to 8.19.18/9.3.7/9.4.3. The affected element is an unknown function of the component Query Parsing. The manipulation results in reachable assertion.
This vulnerability is known as CVE-2026-63140. It is possible to launch the attack remotely. No exploit is available.
The affected component should be upgraded.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-63140 | Elastic Elasticsearch up to 8.19.18/9.3.7/9.4.3 Query Parsing assertion
A vulnerability labeled as critical has been found in Elastic Elasticsearch up to 8.19.18/9.3.7/9.4.3. The affected element is an unknown function of the component Query Parsing. The manipulation results in reachable assertion. This…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR