Elastic Fleet Server

• CVE-2026-78587 Low 3.1 Incorrect Authorization in Fleet Server Leading to Denial of Service of Agent Upload Operations 0.3%
• CVE-2026-72657 Medium 6.5 Authorization Bypass Through User-Controlled Key in Fleet Server Leading to Information Disclosure 0.4%
• CVE-2026-72676 Medium 6.5 Improper Control of Generation of Code in Fleet Server Leading to Code Injection 0.5%
• CVE-2026-56150 Medium 6.5 Allocation of Resources Without Limits or Throttling in Fleet Server Leading to Denial of Service 0.5%
• CVE-2024-52975 Critical 9.0 Fleet Server sensitive information exposure via logs 0.3%
• CVE-2023-31421 Medium 5.9 Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue 0.3%
• CVE-2023-46667 High 8.1 Fleet Server Insertion of Sensitive Information into Log File 0.7%