Elastic beats: Security fixes for CVE-2025-54410, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819,…
Affects elastic-beatsSource GCVE Database
- cleanstart-2026-nu38786
- cleanstart
- cleanstart-2026-kz96078
- cleanstart-2026-bm12601
- cleanstart-2026-ax33738
Mentioned vulnerabilities
Not known to be exploited · fixed in 9.1.10-r0 : update elastic-beats when convenient.
Data as of 10/25/2026, 04:40:10 UTC
No CVSS score from NVD or the CNA
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 5% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 9.1.10-r0
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| CleanStartelastic-beats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A patch is available that resolves these vulnerabilities. Users should upgrade from version 9.1.10-r0 to a later fixed release of elastic-beats. Since this is not a cloud service, remediation requires applying the updated software version. No additional vendor advisory details are provided, so users should consult official Elastic Beats release notes for precise patch versions and instructions.
Description
Multiple security vulnerabilities have been identified in the elastic-beats package, specifically affecting version 9.1.10-r0. These vulnerabilities have been addressed in later releases. No CVSS score is provided, and there are no known exploits in the wild at this time.
Impact
The vulnerabilities affect elastic-beats version 9.1.10-r0 and could potentially allow security issues if exploited. However, no known active exploits have been reported. The exact impact is not detailed due to lack of CVSS or technical specifics.
Summary
The elastic-beats package version 9.1.10-r0 contains multiple security vulnerabilities referenced under CVE-2025-54410 and several CVEs from 2026. These issues impact the elastic-beats software and have been resolved in subsequent releases. The vulnerabilities are documented in the CleanStart ecosystem under the identifier CLEANSTART-2026-NU38786. No detailed technical descriptions or CVSS scores are available in the provided data.
References
- github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-NU38786.json (opens in a new tab)
- osv.dev/vulnerability/CVE-2025-54410 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-25680 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-25681 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-27136 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-32952 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-33186 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-33811 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-33814 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-39817 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-39819 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-39820 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-39821 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-39823 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-39824 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-39825 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-39826 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-39827 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-39828 (opens in a new tab)
- osv.dev/vulnerability/CVE-2026-39829 (opens in a new tab)