Elastic Filebeat

3 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-785888.0.0 – 8.19.17 ; 9.0.0 – 9.3.0Allocation of Resources Without Limits or Throttling in Filebeat Leading to Denial of ServiceMEDIUM 6.50.4 %
CVE-2025-683837.0.0 – 7.17.29 ; 8.0.0 – 8.19.8 ; 9.0.0 – 9.1.8 ; …Filebeat Improper Validation of Specified Index, Position, or Offset in InputMEDIUM 6.50.2 %
CVE-2023-31413versions through 7.17.9 and 8.6.2Filebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http request Authorization or Proxy-Authorization hMEDIUM 5.50.2 %