CVE-2026-82300

[CVE catalog]

Severity

Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Published

Sep 24, 2026, 10:00:00 PM UTC

Updated

Sep 26, 2026, 9:16:55 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.24% · Oct 25, 2026

A flaw was found in Elasticsearch. An authenticated remote attacker can exploit uncontrolled resource consumption to trigger excessive allocation of system resources. This issue can exhaust available memory or processing capacity, leading to a Denial of Service (DoS) where the service becomes unresponsive. elasticsearch: Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service This flaw is rated as Moderate impact for Red Hat products because triggering the resource exhaustion requires authenticated access to the service and only affects availability. While a successful attack can result in a denial of service due to excessive allocation, it cannot be leveraged to compromise confidentiality or system integrity. In Red Hat environments, such as OpenShift AI, Elasticsearch instances are deployed within internal cluster networks, significantly reducing exposure to untrusted external traffic. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.