Elastic Elastic Agent and Elastic Defend

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-1024138.19.13 – 8.19.21 ; 9.2.7 – 9.2.8 ; 9.3.0 – 9.3.8 ; …Uncaught Exception in Elastic Endpoint Leading to Denial of ServiceMEDIUM 6.20.1 %
CVE-2023-466698.0.0 – < 8.15.0Elastic Agent / Elastic Endpoint Security local API key disclosureHIGH 7.10.2 %