CompaniesElastic CloudMonthly reportsAugust 2026
Elastic Cloud in August 2026: incidents, uptime and changes
8incidents posted
7labelled major or critical
54.76%free of major/critical
54.51%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 14.0 days, incident time 14.1 days. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Major 7 · Minor 1
Major and critical incidents 7
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Elasticsearch 9.5.0 contains a query-correctness defect | Major | 6 d | resolved | 08-05 | |
| GCP asia-south1 high latency | Major | 0 min | resolved | 08-06 | |
| Serverless project creation delayed or failing | Major | 4.7 h | resolved | 08-13 | |
| Increased error rates for microsoft-multilingual-e5-large | Major | 4 d | resolved | 08-13 | |
| Elasticsearch 9.5.1: false-positive matches in certain boolean queries | Major | 6 d | resolved | 08-14 | |
| Issue when creating Serverless projects in Azure eastus region | Major | 3.6 h | resolved | 08-20 | |
| [RESOLVED - 2026-08-26] APM endpoints for serverless projects not available | Major | 1.4 h | resolved | 08-27 |
Other incidents 1
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Elevated Error Rates Affecting Managed OTLP | Minor | 1.9 h | resolved | 08-20 |
CVEs published
- CVE-2026-49089 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72683 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72684 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72685 Inefficient Algorithmic Complexity in Elasticsearch Leading to Denial of Service (CVSS 4.3)
- CVE-2026-72686 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72687 Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72678 Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72679 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72680 Authorization Bypass Through User-Controlled Key in Kibana Agent Builder Leading to Unauthorized Data Modification (CVSS 6.5)
- CVE-2026-72681 Missing Authorization in Kibana Leading to Privilege Escalation and Information Disclosure (CVSS 6.5)
- CVE-2026-72669 Missing Authorization in Kibana Leading to Cross-User Information Disclosure and Data Tampering (CVSS 7.6)
- CVE-2026-72670 Exposure of Sensitive Information to an Unauthorized Actor in Kibana Leading to Disclosure of Fleet Proxy Credentials (CVSS 7.7)
- CVE-2026-72671 Missing Authorization in Kibana Leading to Unauthorized Modification of Machine Learning Trained Model Space Assignments (CVSS 4.3)
- CVE-2026-72672 Incorrect Authorization in Kibana Leading to Disclosure of Elastic Defend Endpoint Event Data (CVSS 7.7)
- CVE-2026-72673 Incorrect Authorization in Kibana Leading to Unauthorized Deletion of Synthetics Private Locations (CVSS 5.4)
- CVE-2026-72674 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72675 Missing Authorization in Kibana Machine Learning Leading to Cross-Space Information Disclosure and Unauthorized Data Modification (CVSS 7.1)
- CVE-2026-72676 Improper Control of Generation of Code in Fleet Server Leading to Code Injection (CVSS 6.5)
- CVE-2026-72677 Relative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other Resources (CVSS 7.3)
- CVE-2026-72664 Missing Authorization in Kibana Leading to Unauthorized Execution of Endpoint Response Actions (CVSS 6.5)
- CVE-2026-72665 Missing Authorization in Kibana Leading to Unauthorized Execution of Host Response Actions (CVSS 8.1)
- CVE-2026-72666 Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Query Execution on Managed Hosts (CVSS 6.8)
- CVE-2026-72667 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72658 Cross-Site Request Forgery in Kibana Leading to Privilege Escalation (CVSS 7.3)
- CVE-2026-72659 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72660 Uncaught Exception in Kibana Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72661 Missing Authorization in Kibana Leading to Information Disclosure (CVSS 6.5)
- CVE-2026-72663 Inefficient Algorithmic Complexity in Kibana Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72650 Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure (CVSS 4.3)
- CVE-2026-72651 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72653 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72655 Improperly Controlled Modification of Dynamically-Determined Object Attributes in Kibana Leading to Unauthorized Data Modification (CVSS 4.3)
- CVE-2026-72656 Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72657 Authorization Bypass Through User-Controlled Key in Fleet Server Leading to Information Disclosure (CVSS 6.5)
- CVE-2026-72648 Cleartext Storage of Sensitive Information in an Environment Variable in Elastic Cloud on Kubernetes Leading to Information Disclosure (CVSS 6.5)
- CVE-2026-72645 Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72647 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72638 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72639 Memory Allocation with Excessive Size Value in Elasticsearch Highlighting Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72640 Unintended Proxy or Intermediary in Elastic Cloud on Kubernetes Leading to Cross-Namespace Secret Disclosure (CVSS 6.5)
- CVE-2026-72642 Use of Out-of-range Pointer Offset in the Elasticsearch Machine Learning Native Inference Process (CVSS 8.8)
- CVE-2026-72643 Incorrect Authorization in Kibana Agent Builder Leading to Disclosure and Tampering of Private Agents (CVSS 7.1)
- CVE-2026-72629 Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Space Access to Machine Learning Trained Models (CVSS 7.1)
- CVE-2026-72630 Incorrect Authorization in Kibana Fleet Leading to Privilege Escalation (CVSS 7.1)
- CVE-2026-72631 Improper Privilege Management in Kibana Fleet Leading to Over-Scoped Elastic Agent API Keys (CVSS 6.5)
- CVE-2026-72632 Observable Discrepancy in Kibana Fleet Leading to Disclosure of Elastic Agent Elasticsearch API Keys (CVSS 7.1)
- CVE-2026-72636 Uncontrolled Recursion in Elasticsearch Wildcard Matching Leading to Denial of Service (CVSS 6.5)
- CVE-2026-49096 Uncaught Exception in Kibana Cases Leading to Denial of Service (CVSS 4.3)
- CVE-2026-78581 Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Data Modification in Kibana (CVSS 4.2)
Cite this
Elastic Cloud posted 8 status incidents in August 2026 (7 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- Elastic Cloud in August 2026
- Vendor
- Elastic Cloud
- Date
- URL
- https://rewindex.com/company/elastic-cloud/2026/08