Elastic Packetbeat
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-26933 | 9.0.0 – 9.2.4 ; 8.0.0 – 8.19.10 | Improper Validation of Array Index in Packetbeat Leading to Denial of Service | MEDIUM 5.7 | 0.3 % | ||
| CVE-2026-26932 | 9.0.0 – 9.2.4 ; 8.0.0 – 8.19.10 | Improper Validation of Array Index in Packetbeat Leading to Denial of Service | HIGH 7.5 | 0.5 % | ||
| CVE-2026-0529 | 7.0.0 – 7.17.29 ; 8.0.0 – 8.19.9 ; 9.0.0 – 9.1.9 ; … | Improper Validation of Array Index in Packetbeat Leading to Overflow Buffers | MEDIUM 6.5 | 0.2 % | ||
| CVE-2025-68382 | 7.0.0 – 7.17.29 ; 8.0.0 – 8.19.8 ; 9.0.0 – 9.1.8 ; … | Packetbeat Out-of-bounds Read | MEDIUM 6.5 | 0.2 % | ||
| CVE-2025-68381 | 7.0.0 – 7.17.29 ; 8.0.0 – 8.19.8 ; 9.0.0 – 9.1.8 ; … | Packetbeat Improper Bounds Check | MEDIUM 6.5 | 0.5 % | ||
| CVE-2025-68388 | 8.6.0 – 8.19.8 ; 9.0.0 – 9.1.8 ; 9.2.0 – 9.2.2 | Allocation of resources without limits or throttling (CWE-770) allows an unauthenticated remote attacker to cause excessive allocation (CAPE | MEDIUM 5.3 | 0.4 % | ||
| CVE-2017-11480 | before 5.6.4 | Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is listening f | HIGH 7.5 | 1.4 % |