Elasticsearch
The latest Elasticsearch coverage — news, analysis, and updates from the WindowsNews.AI desk.
Elasticsearch Flaw Lets Authenticated Users Crash Nodes via Snapshot Restore – Fixes in 8.19.8, 9.1.8, 9.2.2
Elastic has disclosed a serious denial-of-service vulnerability in its Elasticsearch product that allows any authenticated user with snapshot restore privileges to crash individual nodes or degrade...
Oversized API Requests Can Crash Your Elasticsearch Cluster – Here’s How to Fix It
Elastic released security patches on Tuesday for a vulnerability that lets an authenticated user crash an Elasticsearch cluster by sending it an unusually large settings payload. The fix lands in the...
Elasticsearch PKI Realm Impersonation Vulnerability CVE-2025-37731: Critical Security Fix
Elasticsearch maintainers have issued a critical security advisory (ESA-2025-27) addressing CVE-2025-37731, a significant authentication bypass vulnerability in Elasticsearch's PKI realm that could...
Elastic Cloud Serverless on Azure launches with pay-per-use pricing and built-in AI
Elastic has officially launched Elastic Cloud Serverless on Microsoft Azure, a game-changing solution for modern search and AI workloads. This fully managed, serverless offering eliminates...