Elastic security advisory (AV26-1021)

Canadian Centre for Cyber Security Version 1 original current

Imported from official source

Serial number: AV26-1021Date: October 8, 2026 As of October 6, 2026, Elastic is affected by vulnerabilities in the following products: Elasticsearch Prior to or equal to 8.19.23 Prior to or equal to 9.4.8 Prior to or equal to 9.5.5 Kibana Prior to or equal to 8.19.22 Prior to or equal to 9.4.7 Prior to or equal to 9.5.4 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Elasticsearch 8.19.23, 9.4.8, 9.5.5 Security Update (ESA-2026-185) - Security Announcements - Discuss the Elastic Stack Kibana 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-187) - Security Announcements - Discuss the Elastic Stack Elastic Security Announcements

This version

Version
1 of 1
Recorded
October 08, 2026 16:09
Change
Initial
Content hash
ea0672c74998bc0b24793b814c79091c
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.