99 matches found
GO-2026-5932 vulnerabilities
Vulnerabilities for packages: terrafmt-fips, elastic-agent-fips, terrafmt, elastic-agent...
GO-2026-5544 vulnerabilities
Vulnerabilities for packages: elastic-agent-fips, elastic-agent...
GO-2026-5343 vulnerabilities
Vulnerabilities for packages: elastic-agent-fips, elastic-agent...
GO-2026-4923 vulnerabilities
Vulnerabilities for packages: beats, datadog-agent-fips, commercial-expanso-edge, frankenphp-8.3, frankenphp-8.5, elastic-agent-fips, cloudbeat-fips, consul-fips, kine, grafana-fips, vault-fips, consul, rke2-runtime-fips, datadog-agent, cloudbeat, fuse-overlayfs-snapshotter, containerd,...
GO-2025-4252 vulnerabilities
Vulnerabilities for packages: beats-fips, cloudbeat, apm-server, apm-server-fips, elastic-agent, cloudbeat-fips...
GO-2023-2413 vulnerabilities
Vulnerabilities for packages: cloudbeat, apm-server, apm-server-fips, elastic-agent, elastic-agent-fips, cloudbeat-fips...
GO-2025-4253 vulnerabilities
Vulnerabilities for packages: cloudbeat, apm-server, apm-server-fips, elastic-agent, elastic-agent-fips, cloudbeat-fips...
GO-2025-4173 vulnerabilities
Vulnerabilities for packages: beats-fips, influxd, minio, zabbix-agent2, beats, dapr-fips, falcosidekick-fips, elastic-agent, agentbeat, dapr, minio-fips, telegraf, falcosidekick, agentbeat-fips, elastic-agent-fips, zabbix-agent2-fips, bento...
CVE-2026-72631
Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...
EUVD-2026-58220
Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...
CVE-2026-72631 Improper Privilege Management in Kibana Fleet Leading to Over-Scoped Elastic Agent API Keys
Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...
CVE-2026-72631
Kibana Fleet vulnerability CVE-2026-72631: Improper Privilege Management can allow an Elastic Agent API key issued to agents in a policy to gain additional write rights (insert new documents and extend index mappings) for certain indices by including extra data streams in the integration policy. ...
CVE-2026-72666
Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized query execution against Elastic Agents that are assigned to a Kibana space the requesting user has no access to, via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. A user who is authoriz...
Kibana 9.4.5, 9.5.1 Security Update (ESA-2026-128)
Improper Privilege Management in Kibana Fleet Leading to Over-Scoped Elastic Agent API Keys Description: Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that...
GHSA-259R-337F-4RFW vulnerabilities
Vulnerabilities for packages: commercial-expanso-edge, nerdctl, telegraf, elastic-agent-fips, omnictl-multiarch, kine, prometheus-mongodb-exporter, aactl, omnictl-multiarch-fips, cilium, kaf, prometheus, minio, kots, zitadel, containerd, kyverno, spire-server, terraform, cert-manager,...
GHSA-PJV4-3C63-699F vulnerabilities
Vulnerabilities for packages: elastic-agent-fips, elastic-agent...
CVE-2026-42602 vulnerabilities
Vulnerabilities for packages: elastic-agent-fips, elastic-agent...
GHSA-HJ4R-2C9C-29H3 vulnerabilities
Vulnerabilities for packages: cloudbeat, apm-server, apm-server-fips, elastic-agent, elastic-agent-fips, cloudbeat-fips...