CVE Weekly Report — Week of Oct 5 – October 11, 2026
2026-W41
6
Total CVEs
0
Critical
2
High
0
Actively exploited
🔴 Critical CVEs (0)
No CVEs in this category this week.
🟠 High CVEs (2)
| CVE | Product | CVSS | KEV | Description | Published |
|---|---|---|---|---|---|
| CVE-2026-103007 | Elasticsearch | 7.2 | — | Incorrect Authorization (CWE-863) in Elasticsearch can lead to Privilege Escalation via a delegated administrative privi… | Oct 6 |
| CVE-2026-103009 | Elasticsearch | 7.1 | — | Authorization Bypass Through User-Controlled Key (CWE-639) in Elasticsearch can lead to Information Disclosure via a spe… | Oct 6 |
🟡 Medium CVEs (8)
| CVE | Product | CVSS | KEV | Description | Published |
|---|---|---|---|---|---|
| CVE-2026-103006 | Elasticsearch | 6.5 | — | Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested r… | Oct 6 |
| CVE-2026-102408 | Elasticsearch | 4.3 | — | Inefficient Regular Expression Complexity (CWE-1333) in Elasticsearch can lead to denial of service via Regular Expressi… | Oct 6 |
| CVE-2026-103005 | Elasticsearch | 6.5 | — | Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Alloc… | Oct 6 |
| CVE-2026-102411 | Elasticsearch | 6.5 | — | Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to Denial of Service via Excess… | Oct 6 |
| CVE-2026-102409 | Elasticsearch | 6.5 | — | Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an El… | Oct 6 |
| CVE-2026-103008 | Elasticsearch | 6.5 | — | Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted request that cau… | Oct 6 |
| CVE-2026-102404 | Elasticsearch | 6.5 | — | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAP… | Oct 6 |
| CVE-2026-102407 | Elasticsearch | 5.4 | — | Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing Funct… | Oct 6 |