EIQ-2026-0013

ID	EIQ-2026-0013
CVE	Multiple (see assessment)
Description	Cumulative Elasticsearch vulnerabilities
Date	30 August 2026
Severity	1 - LOW
Status	⏲
Assessment	This advisory consolidates 14 Elasticsearch security advisories published by Elastic in August 2026, covering Elasticsearch versions up to and including 8.19.19. EclecticIQ Intelligence Center by default mitigates these vulnerabilities by restricting API access to Elasticsearch, or does not exercise the features affected by these vulnerabilities. The following Elasticsearch advisories are covered by this cumulative advisory. ESA-2026-75 / CVE-2026-72683 ESA-2026-76 / CVE-2026-72684 ESA-2026-77 / CVE-2026-72685 ESA-2026-78 / CVE-2026-72686 ESA-2026-79 / CVE-2026-72687 ESA-2026-80 / CVE-2026-72678 ESA-2026-81 / CVE-2026-72679 ESA-2026-111 / CVE-2026-72656 ESA-2026-116 / CVE-2026-72645 ESA-2026-118 / CVE-2026-72647 ESA-2026-119 / CVE-2026-72638 ESA-2026-120 / CVE-2026-72639 ESA-2026-123 / CVE-2026-72642 ESA-2026-133 / CVE-2026-72636
Mitigation	Upgrade to IC 3.8.1 or newer, when available. IC 3.8.1 ships with Elasticsearch 9.4.5. EclecticIQ Intelligence Center does not expose the Elasticsearch REST API directly to end users – all search queries that reach Elasticsearch are mediated by the EclecticIQ Intelligence Center. Administrators should restrict direct access to the Elasticsearch REST API to only trusted hosts and services.
Affected versions	EIQ Intelligence Center 3.7.2 and older, or any instance using Elasticsearch versions up to 8.19.19 (inclusive) or 9.x up to 9.4.4 (inclusive).
Notes	N/A