18 matches found
CVE-2026-115714
Improper Certificate Validation CWE-295 in the operating system certificate bundle shipped in the Docker images of APM Server; Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat; Elastic Agent, including Fleet Server and Cloudbeat; Logstash, for TLS connections that use the operating syste...
CVE-2026-115714 Improper Certificate Validation in Elastic Docker Images Leading to Interception of TLS Connections
Improper Certificate Validation CWE-295 in the operating system certificate bundle shipped in the Docker images of APM Server; Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat; Elastic Agent, including Fleet Server and Cloudbeat; Logstash, for TLS connections that use the operating syste...
EUVD-2026-116082
Improper Certificate Validation CWE-295 in the operating system certificate bundle shipped in the Docker images of APM Server; Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat; Elastic Agent, including Fleet Server and Cloudbeat; Logstash, for TLS connections that use the operating syste...
CVE-2026-115714
Several Elastic products shipped in Docker images are vulnerable to Improper Certificate Validation (CWE-295) due to a compromised third-party dependency. The operating system certificate bundle includes root CAs that signed eight eMudhra intermediate CAs with compromised private keys. This allow...
Multiple Elastic Docker images 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-237)
Improper Certificate Validation in Elastic Docker Images Leading to Interception of TLS Connections Improper Certificate Validation CWE-295 in the operating system certificate bundle shipped in the Docker images of APM Server Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat Elastic Agent...
CVE-2026-106435 vulnerabilities
Vulnerabilities for packages: elastic-connectors, elastic-connectors-fips...
GHSA-86GH-39M5-HHG6 vulnerabilities
Vulnerabilities for packages: elastic-connectors, elastic-connectors-fips...
GHSA-98QM-WVGF-W4CF vulnerabilities
Vulnerabilities for packages: elastic-connectors, elastic-connectors-fips...
CVE-2026-75508 vulnerabilities
Vulnerabilities for packages: elastic-connectors, nemo-rl-cuda-13.0, elastic-connectors-fips, localstack...
CVE-2026-75507 vulnerabilities
Vulnerabilities for packages: elastic-connectors, nemo-rl-cuda-13.0, elastic-connectors-fips, localstack...
GHSA-VJ8H-FX38-H3VC vulnerabilities
Vulnerabilities for packages: elastic-connectors, nemo-rl-cuda-13.0, elastic-connectors-fips, localstack...
GHSA-R77W-QPH3-7VF8 vulnerabilities
Vulnerabilities for packages: elastic-connectors, nemo-rl-cuda-13.0, elastic-connectors-fips, localstack...
GHSA-6Q48-6C7W-9GW2 vulnerabilities
Vulnerabilities for packages: openstack-client-2026.1, openstack-kolla-toolbox-2025.2-fips, mitmproxy, py3-hashin, openstack-keystone-2026.1, superset, openstack-neutron-2026.1, openstack-ironic-2025.2, duplicity, kubeflow-jupyter-web-app, locust, openstack-tempest-2026.1, vllm-cuda-13.2,...
GHSA-2G87-PP6C-29X5 vulnerabilities
Vulnerabilities for packages: nemo-rl-cuda-13.0, awx, litellm-fips, metaflow-service, elastic-connectors-fips, datahub-ingestion-fips, kserve-lgbserver, nemo-gym, kserve-xgbserver-fips, nemo-skills, dask-kubernetes-fips, elastic-connectors, kserve, py3.13-scanner-test-libraries-aiohttp,...
CVE-2026-111063 vulnerabilities
Vulnerabilities for packages: nemo-rl-cuda-13.0, awx, litellm-fips, metaflow-service, elastic-connectors-fips, datahub-ingestion-fips, kserve-lgbserver, nemo-gym, kserve-xgbserver-fips, nemo-skills, dask-kubernetes-fips, elastic-connectors, kserve, py3.13-scanner-test-libraries-aiohttp,...
CVE-2026-111064 vulnerabilities
Vulnerabilities for packages: nemo-rl-cuda-13.0, awx, litellm-fips, metaflow-service, elastic-connectors-fips, datahub-ingestion-fips, kserve-lgbserver, nemo-gym, kserve-xgbserver-fips, nemo-skills, dask-kubernetes-fips, elastic-connectors, kserve, py3.13-scanner-test-libraries-aiohttp,...
GHSA-494J-54XM-RWP3 vulnerabilities
Vulnerabilities for packages: nemo-rl-cuda-13.0, awx, litellm-fips, metaflow-service, elastic-connectors-fips, datahub-ingestion-fips, kserve-lgbserver, nemo-gym, kserve-xgbserver-fips, nemo-skills, dask-kubernetes-fips, elastic-connectors, kserve, py3.13-scanner-test-libraries-aiohttp,...
GHSA-5WR8-GCQF-GQF3 vulnerabilities
Vulnerabilities for packages: nemo-rl-cuda-13.0, awx, litellm-fips, metaflow-service, elastic-connectors-fips, datahub-ingestion-fips, kserve-lgbserver, nemo-gym, kserve-xgbserver-fips, nemo-skills, dask-kubernetes-fips, elastic-connectors, kserve, py3.13-scanner-test-libraries-aiohttp,...