VDB
CVE-2026-103009
CVE-2026-103009
PUBLISHED
CVSS 7.099999904632568 HIGH
Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information Disclosure
EPSS 0.23% · 14.0th percentile
Risk Scores
CVSS 3.1
7.099999904632568
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
EPSS Score
0.23%
14.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | elasticsearch | 8.13.0, 9.0.0, 9.5.0 |
Timeline
- Oct 6, 2026 CVE Published
- Oct 7, 2026 EPSS Score
- Oct 7, 2026 Coalition ESS Score
- Oct 10, 2026 EPSS Score
- Oct 16, 2026 EPSS Score
- Oct 20, 2026 EPSS Score
- Oct 24, 2026 EPSS Score
- Oct 25, 2026 EPSS Score
- Oct 29, 2026 EPSS Score