Elasticsearch: 9.3.8 → 9.4.8
Elastic · upgrade impact · Official site ↗
Fixed by upgrading to 9.4.8 iVulnerabilities that affect 9.3.8 but no longer affect 9.4.8 — the security gain from this upgrade, by exploited status then exploitation probability.
Exploited first, then by exploitation probability (EPSS).
CVE-2026-72649 HIGH EPSS 1% ✓ cleared in 9.4.8 CVE-2026-94408 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-82294 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-82300 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-94396 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-94397 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-94398 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-94399 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-103006 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-72686 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-103007 HIGH EPSS 0% ✓ cleared in 9.4.8 CVE-2026-102408 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-72679 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-103008 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-102411 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-103005 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-102409 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-102404 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-72636 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-72638 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-72639 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-72687 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-72645 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-72647 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-72684 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-72685 MEDIUM EPSS 0% ✓ cleared in 9.4.8 CVE-2026-103009 HIGH EPSS 0% ✓ cleared in 9.4.8 CVE-2026-78605 MEDIUM EPSS 0% ✓ cleared in 9.4.8