CVE-2026-72642
Use of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inference Process
CVSS score
8.8
EPSS probability
%0.6
Risk score
0.1
Published
2 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
No verified news item has been matched to this CVE yet.
Similar Vulnerabilities
6.8
CVE-2015-1427 Actively exploitedelasticsearch: remote code execution via Groovy sandbox bypass
Patch verified Public Exploits:9EPSS %100
6.8
CVE-2014-3120 Actively exploitedelasticsearch: remote code execution flaw via dynamic scripting
VendorRed HatProduct6Server-SubscriptionAssetManager14:katello-configure-0:1.4.5.1-3.el6sam.noarch+8 etkilenen
RH
Patch verified Public Exploits:7EPSS %89
9.8
CVE-2026-33466Path traversal in Elastic Logstash
Patch status unknownEPSS %1
7.2
CVE-2025-37729Vulnerability in Elastic Cloud Enterprise
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-72642"