What’s Vulnerable › Products

floragunn Search Guard FLX vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your floragunn Search Guard FLX version is affected

Latest floragunn Search Guard FLX vulnerabilities

• CVE-2026-4819 — Search Guard audit logs can contain under certain conditions user credentials (CVSS 6.5)
• CVE-2026-4818 — Some management operations on data streams are not properly restricted when user does not have the necessary privileges (CVSS 8.1)
• CVE-2026-4799 — Open redirect vulnerability in Search Guard Kibana Plugin via manipulated requests (CVSS 4.3)
• CVE-2025-13653 — Unauthorized access to documents in data streams with specially crafted requests (CVSS 4.3)
• CVE-2025-12149 — Unauthorized access to documents protected by Document-Level Security (DLS), when Signals watches include a search query involving protected documents (CVSS 6.0)
• CVE-2025-12148 — Unauthorized access to fields protected by Field Masking (FM) for fields of type IP (CVSS 6.0)
• CVE-2025-12147 — Unauthorized access to fields protected by Field-Level Security (FLS) when those fields are members of an object (CVSS 6.0)