CVE-2026-63136

Name of the Vulnerable Software and Affected Versions Elasticsearch (affected versions not specified)

Description Uncontrolled Resource Consumption in Elasticsearch can lead to a denial of service through excessive allocation. A user with search privileges can submit a specially crafted search request that causes a data node to exhaust available heap memory, resulting in node unavailability and cluster degradation. This can lead to cluster downtime that requires manual intervention to restore service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.