floragunn

Products

ProductCVEsExploitedLatest
Search Guard FLX7–Mar 31, 2026

Exploited and recent CVEs

  • CVE-2026-4819 Medium 4.9 Search Guard audit logs can contain under certain conditions user credentials 0.2%
  • CVE-2026-4818 Medium 6.8 Some management operations on data streams are not properly restricted when user does not have the necessary privileges 0.2%
  • CVE-2026-4799 Medium 4.3 Open redirect vulnerability in Search Guard Kibana Plugin via manipulated requests 0.2%
  • CVE-2025-13653 Medium 4.3 Unauthorized access to documents in data streams with specially crafted requests 0.2%
  • CVE-2025-12149 Medium 6.0 Unauthorized access to documents protected by Document-Level Security (DLS), when Signals watches include a search query involving protected documents 0.3%
  • CVE-2025-12148 Medium 6.0 Unauthorized access to fields protected by Field Masking (FM) for fields of type IP 0.3%
  • CVE-2025-12147 Medium 6.0 Unauthorized access to fields protected by Field-Level Security (FLS) when those fields are members of an object 0.3%