EUVD-2026-116082

Improper Certificate Validation CWE-295 in the operating system certificate bundle shipped in the Docker images of APM Server; Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat; Elastic Agent, including Fleet Server and Cloudbeat; Logstash, for TLS connections that use the operating syste...

CVE-2026-115714

Improper Certificate Validation CWE-295 in the operating system certificate bundle shipped in the Docker images of APM Server; Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat; Elastic Agent, including Fleet Server and Cloudbeat; Logstash, for TLS connections that use the operating syste...

CVE-2026-115714 Improper Certificate Validation in Elastic Docker Images Leading to Interception of TLS Connections

Improper Certificate Validation CWE-295 in the operating system certificate bundle shipped in the Docker images of APM Server; Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat; Elastic Agent, including Fleet Server and Cloudbeat; Logstash, for TLS connections that use the operating syste...

CVE-2026-115714

Several Elastic products shipped in Docker images are vulnerable to Improper Certificate Validation (CWE-295) due to a compromised third-party dependency. The operating system certificate bundle includes root CAs that signed eight eMudhra intermediate CAs with compromised private keys. This allow...

Multiple Elastic Docker images 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-237)

Improper Certificate Validation in Elastic Docker Images Leading to Interception of TLS Connections Improper Certificate Validation CWE-295 in the operating system certificate bundle shipped in the Docker images of APM Server Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat Elastic Agent...

S1EM - This Project Is A SIEM With SIRP And Threat Intel, All In One

Today, cyber attacks are more numerous and cause damage in companies. Nevertheless, many software products exist to detect cyber threats. The S1EM solution is based on the principle of bringing together the best products in their field, free of charge, and making them quickly interoperable. S1EM ...

Nethive-Project - Restructured And Collaborated SIEM And CVSS Infrastructure

The Nethive Project provides a Security Information and Event Management SIEM insfrastructure empowered by CVSS automatic measurements. Features Machine Learning powered SQL Injection Detection Server-side XSS Detection based on Chrome's XSS Auditor Post-exploitation Detection powered by Auditbea...