# Announcements **URL:** https://discuss.elastic.co/c/announcements/5.md?page=6 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 7 --- ## [Packetbeat 8.19.11, 9.2.5 Security Update (ESA-2026-11)](https://discuss.elastic.co/t/packetbeat-8-19-11-9-2-5-security-update-esa-2026-11/385533)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [March 19, 2026, 4:56pm UTC](https://discuss.elastic.co/t/packetbeat-8-19-11-9-2-5-security-update-esa-2026-11/385533 "2026-03-19T16:56:17Z")
Improper Validation of Array Index in Packetbeat Leading to Denial of Service Improper Validation of Array Index (CWE-129) in multiple protocol parser components in Packetbeat can lead Denial of Service via Input Data M… --- ## [Metricbeat 8.19.13, 9.2.5 Security Update (ESA-2026-09)](https://discuss.elastic.co/t/metricbeat-8-19-13-9-2-5-security-update-esa-2026-09/385532)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [March 19, 2026, 4:54pm UTC](https://discuss.elastic.co/t/metricbeat-8-19-13-9-2-5-security-update-esa-2026-09/385532 "2026-03-19T16:54:15Z")
Memory Allocation with Excessive Size Value in Metricbeat Leading to Denial of Service Memory Allocation with Excessive Size Value (CWE-789) in the Prometheus remote\_write HTTP handler in Metricbeat can lead Denial of S… --- ## [Logstash 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-06)](https://discuss.elastic.co/t/logstash-8-19-10-9-1-10-9-2-4-security-update-esa-2026-06/385531)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [March 19, 2026, 4:53pm UTC](https://discuss.elastic.co/t/logstash-8-19-10-9-1-10-9-2-4-security-update-esa-2026-06/385531 "2026-03-19T16:53:51Z")
Sensitive Information in Resource Not Removed Before Reuse in Logstash Leading to Access to Sensitive Information Dependency on Vulnerable Third-Party Component (CWE-1395) exists in org.lz4:lz4-java decompression librar… --- ## [Kibana 8.19.12, 9.2.6, 9.3.1 Security Update (ESA-2026-19)](https://discuss.elastic.co/t/kibana-8-19-12-9-2-6-9-3-1-security-update-esa-2026-19/385530)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [March 19, 2026, 4:51pm UTC](https://discuss.elastic.co/t/kibana-8-19-12-9-2-6-9-3-1-security-update-esa-2026-19/385530 "2026-03-19T16:51:08Z")
Missing Authorization in Kibana Leading to Unauthorized Endpoint Response Action Configuration Missing Authorization (CWE-862) in Kibana’s server-side Detection Rule Management can lead to Unauthorized Endpoint Response… --- ## [Kibana 9.3.1 Security Update (ESA-2026-17)](https://discuss.elastic.co/t/kibana-9-3-1-security-update-esa-2026-17/385253)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [February 26, 2026, 4:55pm UTC](https://discuss.elastic.co/t/kibana-9-3-1-security-update-esa-2026-17/385253 "2026-02-26T16:55:40Z")
Improper Neutralization of Special Elements Used in a Template Engine in Kibana Workflows Leading to Server-Side Request Forgery (SSRF) Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) ex… --- ## [Synthetics Recorder 1.4.15 Security Update (ESA-2026-16) - CVE-2025-6554 and CVE-2025-7657](https://discuss.elastic.co/t/synthetics-recorder-1-4-15-security-update-esa-2026-16-cve-2025-6554-and-cve-2025-7657/385252)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [February 26, 2026, 4:55pm UTC](https://discuss.elastic.co/t/synthetics-recorder-1-4-15-security-update-esa-2026-16-cve-2025-6554-and-cve-2025-7657/385252 "2026-02-26T16:55:04Z")
Dependency on Vulnerable Third-Party Component in Synthetics Recorder Leading to Remote Code Execution Dependency on Vulnerable Third-Party Component (CWE-1395) exists in the bundled Chromium browser in Elastic Synthet… --- ## [Kibana 8.19.11, 9.2.5 Security Update (ESA-2026-15)](https://discuss.elastic.co/t/kibana-8-19-11-9-2-5-security-update-esa-2026-15/385251)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [February 26, 2026, 4:54pm UTC](https://discuss.elastic.co/t/kibana-8-19-11-9-2-5-security-update-esa-2026-15/385251 "2026-02-26T16:54:16Z")
Uncontrolled Resource Consumption in Kibana Leading to Denial of Service Uncontrolled Resource Consumption (CWE-400) in the Timelion component in Kibana can lead Denial of Service via Input Data Manipulation (CAPEC-153) … --- ## [Kibana 8.19.11, 9.2.5 Security Update (ESA-2026-14)](https://discuss.elastic.co/t/kibana-8-19-11-9-2-5-security-update-esa-2026-14/385250)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [February 26, 2026, 4:53pm UTC](https://discuss.elastic.co/t/kibana-8-19-11-9-2-5-security-update-esa-2026-14/385250 "2026-02-26T16:53:47Z")
Inefficient Regular Expression Complexity in Kibana Leading to Denial of Service Inefficient Regular Expression Complexity (CWE-1333) in the AI Inference Anonymization Engine in Kibana can lead Denial of Service via Reg… --- ## [Kibana 8.19.12, 9.2.6, 9.3.1 Security Update (ESA-2026-13)](https://discuss.elastic.co/t/kibana-8-19-12-9-2-6-9-3-1-security-update-esa-2026-13/385249)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [February 26, 2026, 4:53pm UTC](https://discuss.elastic.co/t/kibana-8-19-12-9-2-6-9-3-1-security-update-esa-2026-13/385249 "2026-02-26T16:53:12Z")
Improper Input Validation in Kibana Leading to Denial of Service Improper Input Validation (CWE-20) in the internal Content Connectors search endpoint in Kibana can lead Denial of Service via Input Data Manipulation (CA… --- ## [Kibana 8.19.12, 9.2.6, 9.3.1 Security Update (ESA-2026-12)](https://discuss.elastic.co/t/kibana-8-19-12-9-2-6-9-3-1-security-update-esa-2026-12/385248)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [February 26, 2026, 4:52pm UTC](https://discuss.elastic.co/t/kibana-8-19-12-9-2-6-9-3-1-security-update-esa-2026-12/385248 "2026-02-26T16:52:37Z")
Improper Validation of Specified Quantity in Input in Kibana Leading to Denial of Service Improper Validation of Specified Quantity in Input (CWE-1284) in Kibana can allow an authenticated attacker with view-only privil… --- ## [Packetbeat 8.19.11, 9.2.5 Security Update (ESA-2026-10)](https://discuss.elastic.co/t/packetbeat-8-19-11-9-2-5-security-update-esa-2026-10/385247)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [February 26, 2026, 4:51pm UTC](https://discuss.elastic.co/t/packetbeat-8-19-11-9-2-5-security-update-esa-2026-10/385247 "2026-02-26T16:51:41Z")
Improper Validation of Array Index in Packetbeat Leading to Denial of Service Improper Validation of Array Index (CWE-129) in the PostgreSQL protocol parser in Packetbeat can lead Denial of Service via Input Data Manipu… --- ## [I would like to join the elasticsearch community](https://discuss.elastic.co/t/i-would-like-to-join-the-elasticsearch-community/385085)
**Author:** [@vmm](https://discuss.elastic.co/u/vmm)\ **Replies:** 4\ **Last updated:** [February 25, 2026, 12:10am UTC](https://discuss.elastic.co/t/i-would-like-to-join-the-elasticsearch-community/385085 "2026-02-25T00:10:27Z")
Hello, nice to meet you. I am a young software engineer and IT engineering student, and I would like to contribute to this opensource project. I have been writing code for projects sold to the national Public Administra… --- ## [What Is the Best Way to Export MBOX to PDF With Attachments?](https://discuss.elastic.co/t/what-is-the-best-way-to-export-mbox-to-pdf-with-attachments/384927)
**Author:** [@Brant\_anson](https://discuss.elastic.co/u/Brant_anson)\ **Replies:** 1\ **Last updated:** [February 5, 2026, 10:04am UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-export-mbox-to-pdf-with-attachments/384927 "2026-02-05T10:04:17Z")
I am working in a small organization, and we have several important email mailboxes saved in MBOX format from an old email client. Now, due to audit and legal documentation requirements, we need to convert MBOX files int… --- ## [🎉 What’s new in Elastic 9.3](https://discuss.elastic.co/t/what-s-new-in-elastic-9-3/384891)
**Author:** [@piotrprz](https://discuss.elastic.co/u/piotrprz)\ **Replies:** 0\ **Last updated:** [February 3, 2026, 5:21pm UTC](https://discuss.elastic.co/t/what-s-new-in-elastic-9-3/384891 "2026-02-03T17:21:25Z")
:tada: What’s new in Elastic 9.3 Elastic 9.3 builds on the features introduced in 9.2 and focuses largely on making them easier and more predictable to run in production: better automation primitives, faster analytics… --- ## [Elasticsearch MCP Server for 5.x 6.x 7.x 8.x 9.x](https://discuss.elastic.co/t/elasticsearch-mcp-server-for-5-x-6-x-7-x-8-x-9-x/384705)
**Author:** [@azmatjan139](https://discuss.elastic.co/u/azmatjan139)\ **Replies:** 0\ **Last updated:** [January 23, 2026, 6:55am UTC](https://discuss.elastic.co/t/elasticsearch-mcp-server-for-5-x-6-x-7-x-8-x-9-x/384705 "2026-01-23T06:55:47Z")
Elasticsearch MCP Server: Complete Cluster Management Through Natural Language Background Elasticsearch 9.2 introduced native MCP (Model Context Protocol) support, enabling direct integration with AI assistants like Clau… --- ## [Elasticsearch 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-07)](https://discuss.elastic.co/t/elasticsearch-8-19-10-9-1-10-9-2-4-security-update-esa-2026-07/384525)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [January 13, 2026, 8:55pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-10-9-1-10-9-2-4-security-update-esa-2026-07/384525 "2026-01-13T20:55:33Z")
Elasticsearch yawkat LZ4 Java - CVE-2025-66566 (ESA-2026-07) An Information Disclosure vulnerability (CVE-2025-66566) exists in the yawkat LZ4 Java library used by Elasticsearch that allows an attacker to read previous … --- ## [Kibana 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-05)](https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-05/384524)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [January 13, 2026, 8:54pm UTC](https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-05/384524 "2026-01-13T20:54:48Z")
External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector (ESA-2026-05) External Control of File Name or Path (CWE-73) combined with Server-Side Request Forgery (CWE-9… --- ## [Kibana 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-08)](https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-08/384523)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [January 13, 2026, 8:47pm UTC](https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-08/384523 "2026-01-13T20:47:35Z")
Improper Input Validation in Kibana Email Connector Leading to Excessive Allocation (ESA-2026-08) Improper Input Validation (CWE-20) in Kibana's Email Connector can allow an attacker to cause an Excessive Allocation (C… --- ## [Kibana 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-04)](https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-04/384522)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [January 13, 2026, 8:47pm UTC](https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-04/384522 "2026-01-13T20:47:06Z")
Allocation of Resources Without Limits or Throttling in Kibana Fleet (ESA-2026-04) Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive Allocation (CAPEC-130) via a specia… --- ## [Kibana 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-03)](https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-03/384521)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [January 13, 2026, 8:45pm UTC](https://discuss.elastic.co/t/kibana-8-19-10-9-1-10-9-2-4-security-update-esa-2026-03/384521 "2026-01-13T20:45:44Z")
Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation (ESA-2026-03) Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana Fleet can lead to Excessive Allocatio… --- ## [Packetbeat 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-02)](https://discuss.elastic.co/t/packetbeat-8-19-10-9-1-10-9-2-4-security-update-esa-2026-02/384520)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [January 13, 2026, 8:43pm UTC](https://discuss.elastic.co/t/packetbeat-8-19-10-9-1-10-9-2-4-security-update-esa-2026-02/384520 "2026-01-13T20:43:19Z")
Improper Validation of Array Index in Packetbeat Leading to Overflow Buffers (ESA-2026-02) Improper Validation of Array Index (CWE-129) in Packetbeat’s MongoDB protocol parser can allow an attacker to cause Overflow Buff… --- ## [Metricbeat 8.19.10, 9.1.10, 9.2.4 Security Update (ESA-2026-01)](https://discuss.elastic.co/t/metricbeat-8-19-10-9-1-10-9-2-4-security-update-esa-2026-01/384519)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [January 13, 2026, 8:42pm UTC](https://discuss.elastic.co/t/metricbeat-8-19-10-9-1-10-9-2-4-security-update-esa-2026-01/384519 "2026-01-13T20:42:48Z")
Improper Input Validation in Metricbeat Leading to Denial of Service (ESA-2026-01) Improper Validation of Array Index (CWE-129) exists in Metricbeat can allow an attacker to cause a Denial of Service via Input Data Mani… --- ## [Kibana 8.19.7, 9.1.7, and 9.2.1 Security Update (ESA-2025-39)](https://discuss.elastic.co/t/kibana-8-19-7-9-1-7-and-9-2-1-security-update-esa-2025-39/384187)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [December 18, 2025, 9:28pm UTC](https://discuss.elastic.co/t/kibana-8-19-7-9-1-7-and-9-2-1-security-update-esa-2025-39/384187 "2025-12-18T21:28:59Z")
Kibana Improper Authorization (ESA-2025-39) Improper Authorization (CWE-285) in Kibana can lead to privilege escalation (CAPEC-233) by allowing an authenticated user to bypass intended permission restrictions via a craf… --- ## [Kibana 8.19.8, 9.1.8, and 9.2.2 Security Update (ESA-2025-38)](https://discuss.elastic.co/t/kibana-8-19-8-9-1-8-and-9-2-2-security-update-esa-2025-38/384186)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [December 18, 2025, 9:28pm UTC](https://discuss.elastic.co/t/kibana-8-19-8-9-1-8-and-9-2-2-security-update-esa-2025-38/384186 "2025-12-18T21:28:18Z")
Kibana Improper Authorization (ESA-2025-38) Improper Authorization (CWE-285) in Kibana can lead to privilege escalation (CAPEC-233) by allowing an authenticated user to change a document's sharing type to "global," even… --- ## [Elasticsearch 8.19.8, 9.1.8, and 9.2.2 Security Update (ESA-2025-37)](https://discuss.elastic.co/t/elasticsearch-8-19-8-9-1-8-and-9-2-2-security-update-esa-2025-37/384185)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [December 18, 2025, 9:27pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-8-9-1-8-and-9-2-2-security-update-esa-2025-37/384185 "2025-12-18T21:27:04Z")
Elasticsearch Allocation of Resources Without Limits or Throttling (ESA-2025-37) Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore priv… --- ## [Kibana 8.19.9, 9.1.9, and 9.2.3 Security Update (ESA-2025-36)](https://discuss.elastic.co/t/kibana-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-36/384184)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [December 18, 2025, 9:26pm UTC](https://discuss.elastic.co/t/kibana-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-36/384184 "2025-12-18T21:26:25Z")
Kibana Allocation of Resources Without Limits or Throttling (ESA-2025-36) Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can allow a low-privileged authenticated user to cause Excessive Allocat… --- ## [Kibana 8.19.9, 9.1.9, and 9.2.3 Security Update (ESA-2025-35)](https://discuss.elastic.co/t/kibana-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-35/384183)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [December 18, 2025, 9:25pm UTC](https://discuss.elastic.co/t/kibana-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-35/384183 "2025-12-18T21:25:42Z")
Kibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (ESA-2025-35) Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an unauthent… --- ## [Kibana 8.19.9, 9.1.9, and 9.2.3 Security Update (ESA-2025-34)](https://discuss.elastic.co/t/kibana-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-34/384182)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [December 18, 2025, 9:24pm UTC](https://discuss.elastic.co/t/kibana-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-34/384182 "2025-12-18T21:24:54Z")
Kibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (ESA-2025-34) Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an authentic… --- ## [Elasticsearch 8.19.9, 9.1.9, and 9.2.3 Security Update (ESA-2025-33)](https://discuss.elastic.co/t/elasticsearch-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-33/384181)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [December 18, 2025, 9:17pm UTC](https://discuss.elastic.co/t/elasticsearch-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-33/384181 "2025-12-18T21:17:50Z")
Elasticsearch Allocation of Resources Without Limits or Throttling (ESA-2025-33) Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow a low-privileged authenticated user to cause Exc… --- ## [Filebeat 8.19.9, 9.1.9, and 9.2.3 Security Update (ESA-2025-32)](https://discuss.elastic.co/t/filebeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-32/384180)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [December 18, 2025, 9:16pm UTC](https://discuss.elastic.co/t/filebeat-8-19-9-9-1-9-and-9-2-3-security-update-esa-2025-32/384180 "2025-12-18T21:16:47Z")
Filebeat Improper Validation of Specified Index, Position, or Offset in Input (ESA-2025-32) Improper Validation of Specified Index, Position, or Offset in Input (CWE-1285) in Filebeat Syslog parser and the Libbeat Disse… [Previous page](https://discuss.elastic.co/c/announcements/5.md?page=5) [Next page](https://discuss.elastic.co/c/announcements/5.md?page=7)