CVE details
CVE-2026-78605
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') (CWE-444) in Elasticsearch can lead to information disclosure via HTTP Request Smuggling (CAPEC-33). Under specific proxy deployment configurations, a network attacker could obtain confidential responses intended for other authenticated users.
- Score
- 5.9 medium
- Published
- 2026-09-01
- Links
- NVD · cve.org · Report wrong data
Matched ports (2)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| textproc/elasticsearch8 | elasticsearch8 | 8.19.24 | fixed by update | elastic@FreeBSD.org |
| textproc/elasticsearch94 | elasticsearch94 | 9.4.9 | fixed by update | elastic@FreeBSD.org |