THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-63136 (MEDIUM 6.5) — Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A user with search privileges can submit a specially crafted search request that causes a data node to exhaust available heap memory, resulting in node

[NVD] CVE-2026-63136 (MEDIUM 6.5) — Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A user with search privileges can submit a specially crafted search request that causes a data node to exhaust available heap memory, resulting in node

mednvdPublished 2026-07-21

CVE-2026-63136 CVSS: 6.5 MEDIUM Published: 2026-07-21T21:16:52.850

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A user with search privileges can submit a specially crafted search request that causes a data node to exhaust available heap memory, resulting in node unavailability and cluster degradation. An attacker

Indicators of compromise

CVE-2026-63136cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-63136