NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-102411 Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to Denial of Service via Excessive Allocation (CAPEC-130). El... 2026-10-06 6.5 NETWORK MEDIUM NVD
CVE-2026-102410 Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). A... 2026-10-06 4.3 NETWORK MEDIUM NVD
CVE-2026-102409 Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in... 2026-10-06 6.5 NETWORK MEDIUM NVD
CVE-2026-102408 Inefficient Regular Expression Complexity (CWE-1333) in Elasticsearch can lead to denial of service via Regular Expression Exponential Blowup (CAPEC-4... 2026-10-06 4.3 NETWORK MEDIUM NVD
CVE-2026-102407 Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing Functionality Not Properly Constrai... 2026-10-06 5.4 NETWORK MEDIUM NVD
CVE-2026-102406 Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception. In this context, "tenant" refers to... 2026-10-06 8.8 NETWORK HIGH NVD
CVE-2026-102404 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged auth... 2026-10-06 6.5 NETWORK MEDIUM NVD
CVE-2026-102169 On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a captive-portal-enabled SSID can ... 2026-10-06 6.5 ADJACENT_NETWORK MEDIUM NVD
CVE-2026-102168 On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a Captive-Portal-enabled SSID can ... 2026-10-06 6.5 ADJACENT_NETWORK MEDIUM NVD
CVE-2026-102167 On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated ... 2026-10-06 7.5 ADJACENT_NETWORK HIGH NVD
CVE-2026-102165 On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send a crafted packet to cause the ... 2026-10-06 7.5 ADJACENT_NETWORK HIGH NVD
CVE-2026-102164 On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configuration unique to the VESPA use-case), a wireless cli... 2026-10-06 3.1 ADJACENT_NETWORK LOW NVD
CVE-2026-102163 On affected Arista access points with Wireless Intrusion Prevention System (WIPS) active, an unauthenticated attacker within radio frequency (RF) prox... 2026-10-06 8.8 ADJACENT_NETWORK HIGH NVD
CVE-2026-102162 On affected Arista Wi-Fi access points with captive portal, or application firewall enabled on at least one SSID, a vulnerability in the wireless gate... 2026-10-06 8.8 ADJACENT_NETWORK HIGH NVD
CVE-2026-102161 An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load balancer that forwards client ... 2026-10-06 8.8 ADJACENT_NETWORK HIGH NVD