CyberRota
← Ana sayfaya dön

CVE-2026-63136

MEDIUM · CVSS 6.5

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-21T21:16:52.850 · Çekilme zamanı: 2026-07-22T00:08:55.014233+00:00

CyberRota Yorumu

Bellek tüketimine neden olabilir.

CVE
CVE-2026-63136
Severity
MEDIUM
CVSS
6.5
EPSS
Yok

Orijinal NVD Açıklaması

Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A user with search privileges can submit a specially crafted search request that causes a data node to exhaust available heap memory, resulting in node unavailability and cluster degradation. An attacker could leverage this vulnerability to cause cluster downtime requiring manual intervention to restore service.