CVE-2026-115290

{
  "etk_id": "ETK-2026-3384",
  "cve_id": "CVE-2026-115290",
  "display_id": "CVE-2026-115290",
  "ghsa_id": null,
  "euvd_id": null,
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated recursion denial of service in Elasticsearch",
  "summary": "Elasticsearch is affected by uncontrolled recursion when handling serialized data with deeply nested content. An unauthenticated attacker able to reach a node's remote cluster server interface can cause that node to terminate and may repeat the disruption against other reachable nodes.",
  "mitigation": "Restrict access to the remote cluster server interface to trusted systems and isolate Elasticsearch nodes from untrusted networks. Monitor for unexpected node termination and consult Elastic support or authoritative advisories for applicability and updates.",
  "vendor": "Elastic",
  "product": "Elasticsearch",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 8.10.0, <= 8.19.23",
        ">= 9.0.0, <= 9.4.8",
        ">= 9.5.0, <= 9.5.5"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Elasticsearch",
      "purl": null
    }
  ],
  "cwes": [
    674
  ],
  "cvss_score": 7.5,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 30.684248283333332,
  "t0_at": "2026-11-03T16:43:59.960000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-03T16:43:59.960000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-03T16:43:59.960000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-115290"
    }
  }
}