FAIL › dossier
Kibana
PRODUCT· dossier confidence 80%
Elastic is a public company founded in 2012 that builds enterprise search, observability, and security products around the open-source Elasticsearch engine. Its security posture is mixed, with a high-severity RCE flaw in Kibana actively exploited in 2022 and a medium-severity code injection vulnerability in Fleet Service identified in 2026.
PROFILE
CategorySearch AI & ObservabilityWhat they doElastic builds enterprise search, observability, and security products around the open-source Elasticsearch engine, and has repositioned around a Search AI platform centered on vector retrieval and RAG.Founded2012HQAmsterdam, NetherlandsOwnershippublic
Websitehttps://www.elastic.co ↗
SECURITY POSTURE
Elastic has a mixed security track record, with a high-severity RCE flaw in Kibana actively exploited in 2022 and a medium-severity code injection vulnerability in Fleet Service identified in 2026.
Notable failures
- CVE-2019-7609 RCE in Kibana Timelion
- CVE-2026-72676 Code Injection in Fleet Service
Patterns: unpatched edge-device RCEs; code injection in service components
FAILURE HISTORY · 2
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2022-01-10 | CVE-2019-7609 | high | Elastic Kibana's Timelion visualizer contained an arbitrary code execution flaw that was actively exploited in the wild. |
| 2026-08-13 | CVE-2026-72676 | medium | CVE-2026-72676: Improper Control of Generation of Code ('Code Injection') (CWE-94) in Fleet Serv |
DOSSIER SOURCES
- Elastic (ESTC) Company Profile, History, Products & Services · www.financecharts.com
- Elastic · SVTR · svtr.ai
- ESTC - Elastic NV Company Profile - StockInvest.us · stockinvest.us
Open questions: Elastic's corporate headquarters location · Elastic's founding year
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-05 03:52:56.348977+00:00