Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197). An authenticated user may submit a specially crafted query to the ES|QL engine that causes exponential CPU consumption during query evaluation. Because the resource exhaustion persists beyond query completion, repeated requests can fully exhaust the available query worker resources, rendering ES|QL queries unavailable until the node is restarted.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-07-21 | 2 | Disclosure2 |
| 2026-07-22 | 1 | Disclosure1 |
CVE-2026-63263 Denial of Service via Exponential Data Expansion in Elasticsearch ES|QL Engine https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-63263
Post summary
The entry announces CVE-2026-63263, a DoS vulnerability in Elasticsearch ES|QL Engine caused by exponential data expansion, without mentioning any PoC, exploit, or patch.
🚨*CVE* CVE-2026-63263 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197). An authenticated user may submi… https://www.cve.org/CVERecord?id=CVE-2026-63263 ----- Traducción: CVE-2026-63263 Con… http://infoflow.cloud`
Post summary
The post reports CVE-2026-63263 in Elasticsearch, outlining its uncontrolled resource consumption risk and potential for a denial-of-service attack, but does not provide a PoC, exploit, or patch information.
CVE-2026-63263 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197). An authenticated user may submi… https://www.cve.org/CVERecord?id=CVE-2026-63263
Post summary
CVE-2026-63263 in Elasticsearch is a denial‑of‑service vulnerability caused by uncontrolled resource consumption via exponential data expansion, with no PoC, exploitation details, or patch information provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | elastic | elasticsearch | - | - | - |