Synced 12 Sept 2026 01:32 UTC Account

Is Elasticsearch 9.3.8 patched?

Elastic · cycle 9.3 · end of life · Official site ↗
9.3.840/100End of life

Current stable (9.5.3): 100/100

Minimum safe version9.4.5

9.3.8 has 1 open critical-or-high vulnerability. Run 9.4.5 or later to clear it. See what 9.4.5 fixes →

Health score40/100
Open issues12
Exploited now0
Cycle 9.3 EOL2026-08-04
Latest release9.5.3

Summary iPlain-English security status for Elasticsearch 9.3.8, built from its CVEs, active-exploitation data, end-of-life date and latest release.

Elasticsearch 9.3.8 is part of the 9.3 release line. 12 known vulnerabilities affect it. The minimum safe version is 9.4.5 — upgrade to it or later to clear the open critical/high issues. The 9.3 line reached end-of-life on 2026-08-04, so it no longer receives security patches. The latest supported Elasticsearch release is 9.5.3.

Known issues affecting 9.3.8

Exploited first, then by exploitation probability.

CVE-2026-72649 HIGH EPSS 1% → fixed in 9.4.5 CVE-2026-72686 MEDIUM EPSS 0% → fixed in 9.5.1 CVE-2026-72679 MEDIUM EPSS 0% → fixed in 9.4.5 CVE-2026-72636 MEDIUM EPSS 0% → fixed in 9.4.5 CVE-2026-72638 MEDIUM EPSS 0% → fixed in 9.4.5 CVE-2026-72639 MEDIUM EPSS 0% → fixed in 9.5.1 CVE-2026-72687 MEDIUM EPSS 0% → fixed in 9.5.1 CVE-2026-72645 MEDIUM EPSS 0% → fixed in 9.5.1 CVE-2026-72647 MEDIUM EPSS 0% → fixed in 9.4.5 CVE-2026-72684 MEDIUM EPSS 0% → fixed in 9.4.5 CVE-2026-72685 MEDIUM EPSS 0% → fixed in 9.4.5 CVE-2026-78605 MEDIUM EPSS 0% → fixed in 9.4.5

Other Elasticsearch versions

Check another release line of Elasticsearch.

Elasticsearch 9.5.3Elasticsearch 9.4.6Elasticsearch 9.2.8Elasticsearch 9.1.10Elasticsearch 9.0.8Elasticsearch 8.19.21Elasticsearch 8.18.8Elasticsearch 8.17.10Elasticsearch 8.16.6Elasticsearch 7.17.29Elasticsearch 6.8.23

Frequently asked

Is Elasticsearch 9.3.8 patched?

Elasticsearch 9.3.8 is end-of-life and no longer receives security patches. Move to 9.5.3.

What version should I upgrade Elasticsearch 9.3.8 to?

Upgrade Elasticsearch 9.3.8 to at least 9.4.5 to clear its 1 open critical-or-high vulnerability.

When does Elasticsearch 9.3 reach end-of-life?

Elasticsearch 9.3 reached end-of-life on 2026-08-04 and no longer receives security patches.

What is the latest version of Elasticsearch?

The latest supported Elasticsearch release is 9.5.3.

Is Elasticsearch 9.3.8 still receiving security updates?

No — Elasticsearch 9.3.8 is on the 9.3 line, which reached end-of-life on 2026-08-04 and no longer receives security updates. Upgrade to 9.5.3 or later to stay supported.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Elastic's official advisory before you patch or upgrade — Elasticsearch official site ↗