16 matches found
CVE-2026-72640
The Elastic Cloud on Kubernetes ECK operator reads a list of secret references from an annotation on secrets it manages, and it accepts the namespace recorded in each reference without validating that the reference is authorized for the resource being reconciled. A user whose Kubernetes permissio...
CVE-2026-72640 Unintended Proxy or Intermediary in Elastic Cloud on Kubernetes Leading to Cross-Namespace Secret Disclosure
The Elastic Cloud on Kubernetes ECK operator reads a list of secret references from an annotation on secrets it manages, and it accepts the namespace recorded in each reference without validating that the reference is authorized for the resource being reconciled. A user whose Kubernetes permissio...
EUVD-2026-58286
The Elastic Cloud on Kubernetes ECK operator reads a list of secret references from an annotation on secrets it manages, and it accepts the namespace recorded in each reference without validating that the reference is authorized for the resource being reconciled. A user whose Kubernetes permissio...
CVE-2026-72640
The Elastic Cloud on Kubernetes ECK operator reads a list of secret references from an annotation on secrets it manages, and it accepts the namespace recorded in each reference without validating that the reference is authorized for the resource being reconciled. A user whose Kubernetes permissio...
CLEANSTART-2026-KO91610 Security fixes in eck-operator 3.4.1-r1
Package eck-operator version 3.4.1-r1 fixes 2 vulnerabilities: ghsa-hrxh-6v49-42gf, ghsa-gcjh-h69q-9w9g...
CLEANSTART-2026-NK80806 Security fixes in eck-operator-fips 3.4.1-r1
Package eck-operator-fips version 3.4.1-r1 fixes 2 vulnerabilities: ghsa-hrxh-6v49-42gf, ghsa-gcjh-h69q-9w9g...
CLEANSTART-2026-XO42004 Security fixes in eck-operator 3.4.1-r3
Package eck-operator version 3.4.1-r3 fixes 1 vulnerabilities: CVE-2026-56852...
CLEANSTART-2026-DG03733 Security fixes in eck-operator-fips 3.4.1-r2
Package eck-operator-fips version 3.4.1-r2 fixes 1 vulnerabilities: CVE-2026-56852...
Elastic Cloud on Kubernetes 3.5.0 Security Update (ESA-2026-121)
Unintended Proxy or Intermediary in Elastic Cloud on Kubernetes Leading to Cross-Namespace Secret Disclosure The Elastic Cloud on Kubernetes ECK operator reads a list of secret references from an annotation on secrets it manages, and it accepts the namespace recorded in each reference without...
CLEANSTART-2026-OX83078 Security fixes in eck-operator-fips 3.2.0-r0
Package eck-operator-fips version 3.2.0-r0 fixes 12 vulnerabilities: CVE-2025-58187, CVE-2025-58188, CVE-2025-61723, CVE-2025-61725, CVE-2025-47912...
CLEANSTART-2026-PH99378 Security fixes in eck-operator 3.2.0-r0
Package eck-operator version 3.2.0-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...
CLEANSTART-2026-HN09351 Security fixes for CVE-2025-61727, CVE-2025-61729, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 3.2.0-r0, 3.2.0-r1
Multiple security vulnerabilities affect the eck-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-JJ06077 Security fixes for CVE-2025-61727, CVE-2025-61729, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 3.2.0-r0, 3.2.0-r1
Multiple security vulnerabilities affect the eck-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-WW60786 Security fixes for CVE-2025-61727, CVE-2025-61729, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 3.2.0-r0, 3.2.0-r1
Multiple security vulnerabilities affect the eck-operator package. These issues are resolved in later releases. See references for individual vulnerability details...