Elastic security advisory (AV26-1021)

Serial number: AV26-1021
Date: October 8, 2026

As of October 6, 2026, Elastic is affected by vulnerabilities in the following products:

• Elasticsearch
  • Prior to or equal to 8.19.23
  • Prior to or equal to 9.4.8
  • Prior to or equal to 9.5.5
• Kibana
  • Prior to or equal to 8.19.22
  • Prior to or equal to 9.4.7
  • Prior to or equal to 9.5.4

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Elasticsearch 8.19.23, 9.4.8, 9.5.5 Security Update (ESA-2026-185) - Security Announcements - Discuss the Elastic Stack
• Kibana 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-187) - Security Announcements - Discuss the Elastic Stack
• Elastic Security Announcements