CVE-2026-115711

Elastic Cloud Enterprise (ECE) is vulnerable to a credential disclosure flaw (CWE-538 ) where runtime information about platform service containers is stored in a location accessible by lower-privileged platform components. This allows an attacker with access to internal ECE platform services to ...

CVE-2026-115711 Insertion of Sensitive Information into Externally-Accessible File or Directory in Elastic Cloud Enterprise (ECE) Leading to Credential Disclosure

Insertion of Sensitive Information into Externally-Accessible File or Directory CWE-538 in Elastic Cloud Enterprise ECE can lead to credential disclosure via Retrieve Embedded Sensitive Data CAPEC-37. ECE stores runtime information about platform service containers in a location that...

CVE-2026-72648

Cleartext Storage of Sensitive Information in an Environment Variable CWE-526 in Elastic Cloud on Kubernetes ECK can lead to information disclosure via Retrieve Embedded Sensitive Data CAPEC-37. When ECK reconciles a Fleet Server resource that authenticates to Elasticsearch with a service account...

CVE-2026-72648

Cleartext Storage of Sensitive Information in an Environment Variable CWE-526 in Elastic Cloud on Kubernetes ECK can lead to information disclosure via Retrieve Embedded Sensitive Data CAPEC-37. When ECK reconciles a Fleet Server resource that authenticates to Elasticsearch with a service account...

PT-2026-71763

Cleartext Storage of Sensitive Information in an Environment Variable CWE-526 in Elastic Cloud on Kubernetes ECK can lead to information disclosure via Retrieve Embedded Sensitive Data CAPEC-37. When ECK reconciles a Fleet Server resource that authenticates to Elasticsearch with a service account...