GHSA-PJV4-3C63-699F vulnerabilities

Vulnerabilities for packages: elastic-agent, elastic-agent-fips...

CVE-2026-42602 vulnerabilities

Vulnerabilities for packages: elastic-agent, elastic-agent-fips...

PT-2026-54867

Name of the Vulnerable Software and Affected Versions Elastic Defend affected versions not specified Description Incorrect authorization allows a low-privileged authenticated user to access response action data they are not authorized to view. This occurs because functionality is not properly...

GHSA-HJ4R-2C9C-29H3 vulnerabilities

Vulnerabilities for packages: elastic-agent, elastic-agent-fips, apm-server, cloudbeat, apm-server-fips, cloudbeat-fips...

CVE-2023-49922 vulnerabilities

Vulnerabilities for packages: elastic-agent, elastic-agent-fips, apm-server, cloudbeat, apm-server-fips, cloudbeat-fips...

Horovod Vulnerable to Command Injection

Horovod versions up to and including v0.28.1 are vulnerable to unauthenticated remote code execution. The vulnerability is due to improper handling of base64-encoded data in the ElasticRendezvousHandler, a subclass of KVStoreHandler. Specifically, the putvalue method in ElasticRendezvousHandler...

PT-2026-53444

Horovod versions up to and including v0.28.1 are vulnerable to unauthenticated remote code execution. The vulnerability is due to improper handling of base64-encoded data in the ElasticRendezvousHandler, a subclass of KVStoreHandler. Specifically, the put value method in ElasticRendezvousHandler...

CVE-2026-48496 vulnerabilities

Vulnerabilities for packages: elastic-agent, elastic-agent-fips...

GHSA-F2R5-5M7W-P5CX vulnerabilities

Vulnerabilities for packages: elastic-agent, elastic-agent-fips...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: argo-cd, kubevela-fips, grafana-fips, loki, kubescape-server, mattermost-fips, trivy, gitea, commercial-expanso-edge, cloudbeat, rancher, kine, argo-workflows, tekton-pipelines, nerdctl, k9s-fips, cilium-cli, kubescape, containerd, kuma, prometheus-mongodb-exporter,...

GO-2026-5611 Elastic Package Registry has Improper Verification of Cryptographic Signature in github.com/elastic/package-registry

Elastic Package Registry has Improper Verification of Cryptographic Signature in github.com/elastic/package-registry...

CVE-2026-40012

ECS zero scoped answers are stored in the packet cache while they should not. This impacts only configurations that have ECS enabled;...

EUVD-2026-39356

ECS zero scoped answers are stored in the packet cache while they should not. This impacts only configurations that have ECS enabled;...

CVE-2026-40012 Information about ECS zero scoped answers might leak to clients that use a specific ECS

ECS zero scoped answers are stored in the packet cache while they should not. This impacts only configurations that have ECS enabled;...

CVE-2026-40012

ECS zero scoped answers are stored in the packet cache while they should not. This impacts only configurations that have ECS enabled;...

CVE-2026-40012

The vulnerability CVE-2026-40012 affects configurations with ECS enabled, where ECS zero-scoped answers are stored in the packet cache instead of being properly restricted, potentially leaking to clients. The issue has a network-based attack surface with low confidentiality impact (CVSS v3.1: 5.3...

PT-2026-52388

ECS zero scoped answers are stored in the packet cache while they should not. This impacts only configurations that have ECS enabled;...

The vulnerabilities of Dell Elastic Cloud Storage and Dell ObjectScale storage platforms involve insecure privilege management, allowing attackers to escalate their privileges.

The vulnerability of Dell Elastic Cloud Storage and Dell ObjectScale storage platforms lies in the insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerabilities of Dell Elastic Cloud Storage and Dell ObjectScale storage platforms lie in the lack of mechanisms to neutralize elements in CSV files, allowing attackers to execute arbitrary code.

The vulnerability of Dell Elastic Cloud Storage and Dell ObjectScale storage platforms lies in the absence of mechanisms to neutralize certain elements in CSV files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerabilities of Dell Elastic Cloud Storage and Dell ObjectScale storage platforms, related to the use of pre-installed credentials, allow attackers to disclose sensitive information that should be protected.

The vulnerability of Dell Elastic Cloud Storage and Dell ObjectScale storage platforms lies in the use of pre-installed credentials. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by these systems...