CompaniesElastic CloudMonthly reportsSeptember 2026
Elastic Cloud in September 2026: incidents, uptime and changes
9incidents posted
9labelled major or critical
52.96%free of major/critical
52.96%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 14.1 days, incident time 14.1 days. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Major 9
Major and critical incidents 9
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Replication bug causing slow recoveries | Major | 30 d | resolved | 09-01 | |
| Issue impacting services running in GCP us-central1 | Major | 4.8 h | resolved | 09-01 | |
| Elevated Error Rates for Specific Models Impacting Elastic Inference Service in EU Regions | Major | 0 min | resolved | 09-02 | |
| Elastic Agent enrollment/check-in failures on 9.5.3 (and 9.4.6) with Fleet remote Elasticsearch output | Major | 8 d | resolved | 09-09 | |
| Kibana access restored for UI-assigned Organization Owners on Hosted deployments | Major | 21 h | resolved | 09-10 | |
| Delayed Metrics in Cloud Console - GCP us-east4 | Major | 8.4 h | resolved | 09-12 | |
| Elastic Support Portal unavailable | Major | 2.4 h | resolved | 09-16 | |
| AutoOps node metrics temporarily unavailable in some regions | Major | 41 min | resolved | 09-17 | |
| Degraded Performance: Cloud Provisioning Delays | Major | 2.0 h | resolved | 09-23 |
CVEs published
- CVE-2024-14047 Improper Link Resolution Before File Access ('Link Following') in Winlogbeat Leading to Arbitrary File Write and Denial of Service (CVSS 7.2)
- CVE-2026-33465 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVSS 6.5)
- CVE-2026-56143 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service (CVSS 4.9)
- CVE-2026-72652 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVSS 6.5)
- CVE-2026-63137 Incorrect Authorization in Kibana Leading to Privilege Escalation (CVSS 8.3)
- CVE-2026-72682 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72649 Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution (CVSS 8.8)
- CVE-2026-72644 Uncaught Exception in Kibana Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72628 Improper Handling of Highly Compressed Data in Kibana Leading to Denial of Service (CVSS 6.5)
- CVE-2026-72641 Incorrect Authorization in Kibana Leading to Unauthorized Modification of Data (CVSS 5.4)
- CVE-2026-72633 Incorrect Authorization in Kibana Leading to Unauthorized Disabling of Privilege Monitoring (CVSS 4.3)
- CVE-2026-72654 Execution with Unnecessary Privileges in Kibana Leading to Information Disclosure (CVSS 6.5)
- CVE-2026-78605 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in Elasticsearch Leading to Information Disclosure (CVSS 5.9)
- CVE-2026-78608 Missing Authorization in Kibana Leading to Information Disclosure (CVSS 6.5)
- CVE-2026-78607 Missing Authorization in Elasticsearch Leading to Information Disclosure (CVSS 5.4)
- CVE-2026-78603 Missing Authorization in Kibana Leading to Unauthorized Disclosure of Fleet Deployment Metadata (CVSS 4.3)
- CVE-2026-78606 Incorrect Authorization in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data (CVSS 4.2)
- CVE-2026-78592 Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources (CVSS 7.3)
- CVE-2026-78597 Missing Authorization in Kibana Entity Store Leading to Unauthorized API Key Creation (CVSS 4.3)
- CVE-2026-63138 Improper Neutralization of Special Elements in Data Query Logic in Kibana Leading to Information Disclosure (CVSS 6.5)
- CVE-2026-78609 Incorrect Authorization in Elastic Cloud on Kubernetes Leading to Unauthorized Modification of Data (CVSS 5.4)
- CVE-2026-78600 Incomplete Cleanup in Elastic Cloud on Kubernetes Leading to Unauthorized Cross-Namespace Credential Retention (CVSS 3.5)
- CVE-2026-78601 Missing Authorization in Kibana Leading to Unauthorized Elasticsearch Index Data Exposure (CVSS 5.5)
- CVE-2026-78602 Improper Limitation of a Pathname to a Restricted Directory in Elastic Maps Server Leading to Unauthorized File Disclosure (CVSS 5.3)
- CVE-2026-78604 Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM (CVSS 7.8)
- CVE-2026-78594 Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service (CVSS 4.9)
- CVE-2026-78598 Incorrect Authorization in Kibana Leading to Unauthorized Cross-Space Exposure of Machine Learning Job Data (CVSS 5.4)
- CVE-2026-78599 Stored Path Traversal in Kibana Leading to Unauthorized Deletion of Internal Resources (CVSS 6.5)
- CVE-2026-78590 Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources (CVSS 7.3)
- CVE-2026-78591 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Kibana Leading to Unauthorized Resource Deletion (CVSS 6.3)
- CVE-2026-78584 Observable Response Discrepancy in Kibana Leading to Cross-Space Information Disclosure (CVSS 4.3)
- CVE-2026-78586 Allocation of Resources Without Limits or Throttling in Kibana Leading to Denial of Service (CVSS 6.5)
- CVE-2026-78587 Incorrect Authorization in Fleet Server Leading to Denial of Service of Agent Upload Operations (CVSS 3.1)
- CVE-2026-78588 Allocation of Resources Without Limits or Throttling in Filebeat Leading to Denial of Service (CVSS 6.5)
- CVE-2026-82293 Incorrect Authorization in Kibana Leading to Unauthorized Resource Consumption (CVSS 4.3)
- CVE-2026-78583 Incorrect Authorization in Kibana Leading to Privilege Escalation (CVSS 8.1)
- CVE-2026-78593 Improper Control of Generation of Code in Kibana Leading to Privilege Escalation (CVSS 4.3)
- CVE-2026-78595 Missing Authorization in Kibana Fleet Plugin Leading to Cross-Space Agent Data Disclosure (CVSS 4.3)
- CVE-2026-78596 Missing Authorization in Kibana Leading to Unauthorized Cross-Space Write Operations (CVSS 4.3)
- CVE-2026-82298 Incorrect Authorization in Kibana Leading to Denial of Service (CVSS 4.3)
- CVE-2026-82299 Incorrect Authorization in Kibana Leading to Information Disclosure (CVSS 6.5)
- CVE-2026-82302 Incorrect Authorization in Kibana Leading to Unauthorized Configuration Modification (CVSS 8.1)
- CVE-2026-72668 Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Privilege Escalation (CVSS 7.3)
- CVE-2026-72662 Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Disclosure, Modification, and Deletion of Data (CVSS 6.3)
- CVE-2026-78582 Missing Authorization in Kibana Leading to Unauthorized Deletion of Data (CVSS 6.5)
- CVE-2026-82294 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service (CVSS 6.5)
- CVE-2026-82300 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service (CVSS 6.5)
- CVE-2026-94398 Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service (CVSS 6.5)
- CVE-2026-94399 Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service (CVSS 6.5)
- CVE-2026-94400 Uncontrolled Resource Consumption in Kibana Leading to denial of service (CVSS 6.5)
- CVE-2026-94396 Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service (CVSS 6.5)
- CVE-2026-94397 Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service (CVSS 6.5)
- CVE-2026-94408 Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service (CVSS 4.9)
Cite this
Elastic Cloud posted 9 status incidents in September 2026 (9 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- Elastic Cloud in September 2026
- Vendor
- Elastic Cloud
- Date
- URL
- https://rewindex.com/company/elastic-cloud/2026/09