Search-guard Flx — known CVE vulnerabilities

Every CVE whose affected-product data names Search-guard Flx, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2026-4818 — CVSS 6.8 (medium): In Search Guard FLX versions from 3.0.0 up to 4.0.1, there exists an issue which allows users without the necessary privileges to execute…
• CVE-2026-4819 — CVSS 4.9 (medium): In Search Guard FLX versions from 1.0.0 up to 4.0.1, the audit logging feature might log user credentials from users logging into Kibana.
• CVE-2026-4799 — CVSS 4.3 (medium): In Search Guard FLX up to version 4.0.1, it is possible to use specially crafted requests to redirect the user to an untrusted URL.