CompaniesElastic CloudMonthly reportsOctober 2026
Elastic Cloud in October 2026: incidents, uptime and changes
6incidents posted
6labelled major or critical
94.05%free of major/critical
94.05%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 44 h 16 min, incident time 44 h 16 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Major 6
Major and critical incidents 6
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Delayed Serverless Metrics in Azure UAE North region | Major | 3.8 h | resolved | 10-06 | |
| Delayed or Unavailable project operation in GCP us-central1 | Major | 8.2 h | resolved | 10-08 | |
| Degraded availability for some Elastic Cloud Hosted and Serverless deployments in GCP europe-west2 (London) | Major | 15 h | resolved | 10-20 | |
| Elastic Cloud scaling issues in Azure | Major | 7.0 h | resolved | 10-20 | |
| 403 error when trying to access Autoops in newly created serverless projects | Major | 9.5 h | resolved | 10-22 | |
| Elastic Support Portal is unavailable | Major | 2.5 h | resolved | 10-23 |
CVEs published
- CVE-2026-102404 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service (CVSS 6.5)
- CVE-2026-102406 Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception (CVSS 8.8)
- CVE-2026-102407 Incorrect Authorization in Elasticsearch Leading to Unauthorized Data Stream Modification (CVSS 5.4)
- CVE-2026-102408 Inefficient Regular Expression Complexity in Elasticsearch Leading to Denial of Service (CVSS 4.3)
- CVE-2026-102409 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service (CVSS 6.5)
- CVE-2026-102410 Missing Authorization in Kibana Leading to Information Disclosure (CVSS 4.3)
- CVE-2026-102411 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service (CVSS 6.5)
- CVE-2026-102412 Incorrect Authorization in Kibana Leading to Sensitive Information Disclosure (CVSS 6.5)
- CVE-2026-102413 Uncaught Exception in Elastic Endpoint Leading to Denial of Service (CVSS 6.2)
- CVE-2026-103005 Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service (CVSS 6.5)
- CVE-2026-103006 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service (CVSS 6.5)
- CVE-2026-103007 Incorrect Authorization in Elasticsearch Leading to Privilege Escalation (CVSS 7.2)
- CVE-2026-103008 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service (CVSS 6.5)
- CVE-2026-103009 Authorization Bypass Through User-Controlled Key in Elasticsearch Leading to Information Disclosure (CVSS 7.1)
- CVE-2026-115706 Authorization Bypass Through User-Controlled Key in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation (CVSS 6.8)
- CVE-2026-115707 Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation (CVSS 6.4)
- CVE-2026-115708 Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication Bypass (CVSS 7.2)
- CVE-2026-115709 Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Loss (CVSS 8.2)
- CVE-2026-115711 Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Credential Disclosure (CVSS 6.4)
- CVE-2026-115712 Incorrect Authorization in Elastic Cloud Enterprise (ECE) Leading to Unauthorized Modification of Platform Settings (CVSS 4.3)
- CVE-2026-115713 Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Modification (CVSS 7.5)
Maintenance 1
Show scheduled maintenance
Cite this
Elastic Cloud posted 6 status incidents in October 2026 (6 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- Elastic Cloud in October 2026
- Vendor
- Elastic Cloud
- Date
- URL
- https://rewindex.com/company/elastic-cloud/2026/10