Elastic Filebeat vulnerabilities

3 CVEs affecting Elastic Filebeat, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-78588, published 2026-09-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-78588, published 2026-09-02. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Allocation of Resources Without Limits or Throttling (CWE-770) in Filebeat can lead to a denial of service via Excessive Allocation (CAPEC-130). An attacker able to reach the Filebeat HTTP ingestion…
CVE-2023-31413, published 2023-05-04. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Filebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http request Authorization or Proxy-Authorization header contents to be leaked in the logs when debug logging…
CVE-2025-68383, published 2025-12-18. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper Validation of Specified Index, Position, or Offset in Input (CWE-1285) in Filebeat Syslog parser and the Libbeat Dissect processor can allow a user to trigger a Buffer Overflow (CAPEC-100)…