Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user. A user with read-level index access can submit a request that triggers unbounded recursive processing within the Elasticsearch query evaluation component, causing a fatal error that terminates the affected node. In single-node deployments, this results in complete service outage; in multi-node clusters, it causes repeated node restarts and sustained availability degradation.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-07-21 | 2 | Disclosure2 |
| 2026-07-22 | 1 | Disclosure1 |
CVE-2026-63144 Denial of Service via Uncontrolled Recursion in Elasticsearch Query Evaluation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-63144
Post summary
The text announces CVE-2026-63144, a Denial of Service vulnerability caused by uncontrolled recursion during Elasticsearch query evaluation, with no PoC, exploit, or patch mentioned.
🚨*CVE* CVE-2026-63144 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated use… https://www.cve.org/CVERecord?id=CVE-2026-63144 ----- Traducción: CVE-2026-63144 Rec… http://infoflow.cloud`
Post summary
The post reveals CVE-2026-63144, detailing its nature as an uncontrolled recursion in Elasticsearch that can cause a denial‑of‑service when an attacker sends a crafted search request.
CVE-2026-63144 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated use… https://www.cve.org/CVERecord?id=CVE-2026-63144
Post summary
The post announces CVE‑2026‑63144, detailing an uncontrolled recursion flaw in Elasticsearch that can cause denial of service via crafted search requests from low‑privileged authenticated users, with no exploit, patch, or PoC information provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | elastic | elasticsearch | - | - | - |