CVE Tools
Track your stack

Elastic

321 CVEs across 38 months on the top 200 list since Jul 2014. Peak rank #22 in Aug 2026. 2 of them are now in CISA KEV.

Elastic CVEs per month since Jul 2014

Dec 2021 to Nov 2026 in the lens. Point at a month to read it, or drag the frame to move through the record.Tallest in the lens: 53, Sep 2026
Dec 2021: below the top 200 that month, 2 or fewer CVEsJan 2022: below the top 200 that month, 2 or fewer CVEsFeb 2022: below the top 200 that month, 2 or fewer CVEsMar 2022: 3 CVEs · 0 critical · 0 now in CISA KEV · rank #186 · mostly Kibana, ElasticsearchApr 2022: below the top 200 that month, 3 or fewer CVEsMay 2022: below the top 200 that month, 3 or fewer CVEsJun 2022: below the top 200 that month, 3 or fewer CVEsJul 2022: below the top 200 that month, 3 or fewer CVEsAug 2022: below the top 200 that month, 3 or fewer CVEsSep 2022: below the top 200 that month, 3 or fewer CVEsOct 2022: below the top 200 that month, 2 or fewer CVEsNov 2022: below the top 200 that month, 3 or fewer CVEsDec 2022: below the top 200 that month, 3 or fewer CVEsJan 2023: below the top 200 that month, 3 or fewer CVEsFeb 2023: 3 CVEs · 0 critical · 0 now in CISA KEV · rank #198 · mostly Kibana, Endgame, Endpoint SecurityMar 2023: no snapshot, the run for this month failedApr 2023: below the top 200 that month, 3 or fewer CVEsMay 2023: below the top 200 that month, 3 or fewer CVEsJun 2023: below the top 200 that month, 4 or fewer CVEsJul 2023: below the top 200 that month, 3 or fewer CVEsAug 2023: below the top 200 that month, 4 or fewer CVEsSep 2023: below the top 200 that month, 3 or fewer CVEsOct 2023: 9 CVEs · 1 critical · 0 now in CISA KEV · rank #85 · mostly Elasticsearch, Fleet Server, Apm ServerNov 2023: 8 CVEs · 0 critical · 0 now in CISA KEV · rank #91 · mostly Kibana, Elasticsearch, Apm Java AgentDec 2023: 6 CVEs · 0 critical · 0 now in CISA KEV · rank #112 · mostly Kibana, Elastic Agent, Elastic BeatsJan 2024: below the top 200 that month, 4 or fewer CVEsFeb 2024: below the top 200 that month, 4 or fewer CVEsMar 2024: below the top 200 that month, 4 or fewer CVEsApr 2024: below the top 200 that month, 4 or fewer CVEsMay 2024: below the top 200 that month, 5 or fewer CVEsJun 2024: 6 CVEs · 0 critical · 0 now in CISA KEV · rank #113 · mostly Kibana, Elasticsearch, Elastic Cloud EnterpriseJul 2024: below the top 200 that month, 4 or fewer CVEsAug 2024: below the top 200 that month, 4 or fewer CVEsSep 2024: below the top 200 that month, 3 or fewer CVEsOct 2024: below the top 200 that month, 4 or fewer CVEsNov 2024: below the top 200 that month, 4 or fewer CVEsDec 2024: below the top 200 that month, 3 or fewer CVEsJan 2025: 8 CVEs · 1 critical · 0 now in CISA KEV · rank #103 · mostly Kibana, Elastic Defend, ElasticsearchFeb 2025: below the top 200 that month, 3 or fewer CVEsMar 2025: below the top 200 that month, 5 or fewer CVEsApr 2025: 5 CVEs · 0 critical · 0 now in CISA KEV · rank #148 · mostly Elasticsearch, Kibana, Elastic DefendMay 2025: 8 CVEs · 1 critical · 0 now in CISA KEV · rank #99 · mostly Kibana, Elastic Agent, ElasticsearchJun 2025: below the top 200 that month, 4 or fewer CVEsJul 2025: below the top 200 that month, 5 or fewer CVEsAug 2025: below the top 200 that month, 4 or fewer CVEsSep 2025: below the top 200 that month, 4 or fewer CVEsOct 2025: 6 CVEs · 1 critical · 0 now in CISA KEV · rank #153 · mostly Kibana, Elastic Cloud Enterprise (Ece), ElasticsearchNov 2025: below the top 200 that month, 4 or fewer CVEsDec 2025: 13 CVEs · 0 critical · 0 now in CISA KEV · rank #63 · mostly Kibana, Elasticsearch, PacketbeatJan 2026: 6 CVEs · 0 critical · 0 now in CISA KEV · rank #142 · mostly Kibana, Metricbeat, PacketbeatFeb 2026: 6 CVEs · 0 critical · 0 now in CISA KEV · rank #167 · mostly Kibana, PacketbeatMar 2026: below the top 200 that month, 7 or fewer CVEsApr 2026: 7 CVEs · 0 critical · 0 now in CISA KEV · rank #155 · mostly Kibana, Logstash, Elastic Package RegistryMay 2026: 10 CVEs · 0 critical · 0 now in CISA KEV · rank #122 · mostly KibanaJun 2026: below the top 200 that month, 7 or fewer CVEsJul 2026: 28 CVEs · 0 critical · 0 now in CISA KEV · rank #33 · mostly Kibana, Elasticsearch, Endpoint SecurityAug 2026: 49 CVEs · 0 critical · 0 now in CISA KEV · rank #22 · mostly Kibana, Elasticsearch, Elastic Cloud On KubernetesSep 2026: 53 CVEs · 0 critical · 0 now in CISA KEV · rank #27 · mostly Kibana, Elasticsearch, Eck OperatorOct 2026: 21 CVEs · 0 critical · 0 now in CISA KEV · rank #88 · mostly Elasticsearch, Elastic Cloud Enterprise, KibanaNov 2026: none that month (the list had room for every one)

In the lens

The products that kept showing up in Elastic's monthly top three from Dec 2021 to Nov 2026. Move the lens and the list follows.

  1. Kibana14318 months
  2. Elasticsearch6013 months
  3. Elastic Cloud Enterprise82 months
  4. Packetbeat53 months
  5. Elastic Agent32 months
  6. Eck Operator21 month
  7. Elastic Cloud On Kubernetes21 month
  8. Elastic Defend22 months
  9. Endpoint Security22 months
  10. Fleet Server21 month

Year by year

Each year's months on the top 200 list. Pick a year to read it in the lens.

The record

Peak rank
#22 in Aug 2026
Busiest month
Sep 2026, 53 CVEs
Months with a KEV entry
2 of 38 on the list
On the top 200 list
38 of 131 monthly snapshots

Each monthly snapshot keeps the top 200 vendors by CVEs. A month below the cut shows the most it could have had: the smallest count that made the list. 18 months have no snapshot because the run failed.

MethodologyAll months on recordThe Elastic hub