114 matches found
agent-skills
Elastic Agent Skills Elastic Agent Skills — built by the people who built Elastic — deliver native platform expertise directly to your AI coding agent. This is the official Agent Skills library, compatible with agentic IDEs such as Cursor, GitHub Copilot, Windsurf, Gemini CLI, and more. Skills...
osquery_cve-2024-23443
Prueba de Concepto POC CVE-2024-23443 hpbiososquery Agregar la extensión osqery HP BIOS WMI a Elastic Agent Dependencias pip install pywin32 pip install osquery pip install pyinstaller Compilación root@kitploit: pyinstaller --onefile hpbiosenumeration.py Instalación 1. Copie la extensión a la...
CVE-2026-78583
Incorrect Authorization CWE-863 in Kibana can lead to privilege escalation via Input Data Manipulation CAPEC-153. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding...
CVE-2026-78583
CVE-2026-78583 is an Incorrect Authorization (CWE-863) vulnerability in Kibana 's Elastic Fleet feature. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents . An attacker holding Fl...
EUVD-2026-70657
Incorrect Authorization CWE-863 in Kibana can lead to privilege escalation via Input Data Manipulation CAPEC-153. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding...
CVE-2026-78583 Incorrect Authorization in Kibana Leading to Privilege Escalation
Incorrect Authorization CWE-863 in Kibana can lead to privilege escalation via Input Data Manipulation CAPEC-153. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding...
PT-2026-85211
Name of the Vulnerable Software and Affected Versions Kibana versions 8.0.0 through 8.19.20 Kibana versions 9.0.0 through 9.4.5 Kibana versions 9.5.0 through 9.5.2 Description Incorrect authorization in Kibana allows for privilege escalation through input data manipulation. The system fails to...
CVE-2026-78604
Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where Elastic Agent is installed in unprivileged mode, resources used by the agent service are created with access controls...
CVE-2026-78604 Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM
Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where Elastic Agent is installed in unprivileged mode, resources used by the agent service are created with access controls...
CVE-2026-78604 Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM
Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where Elastic Agent is installed in unprivileged mode, resources used by the agent service are created with access controls...
CVE-2026-78604
CVE-2026-78604 is an incorrect permission assignment (CWE-732) in Elastic Agent on Windows systems installed in unprivileged mode . Resources used by the agent service are created with access controls broader than required, allowing a local user to replace binaries (CAPEC-642) and cause the servi...
CVE-2026-78604 Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM
Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where Elastic Agent is installed in unprivileged mode, resources used by the agent service are created with access controls...
EUVD-2026-70057
Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where Elastic Agent is installed in unprivileged mode, resources used by the agent service are created with access controls...
Elastic Agent 8.19.21, 9.4.6, 9.5.2 Security Update (ESA-2026-150)
Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM Incorrect Permission Assignment for Critical Resource CWE-732 in Elastic Agent can lead to local privilege escalation via Replace Binaries CAPEC-642. On Windows systems where...
GO-2026-5343 vulnerabilities
Vulnerabilities for packages: elastic-agent-fips, elastic-agent...
GO-2026-5544 vulnerabilities
Vulnerabilities for packages: elastic-agent-fips, elastic-agent...
GO-2026-5932 vulnerabilities
Vulnerabilities for packages: peerdb-flow-fips, terrafmt, peerdb-flow, terrafmt-fips, elastic-agent-fips, elastic-agent...
GO-2026-4923 vulnerabilities
Vulnerabilities for packages: grafana, frankenphp-8.3, beats-fips, elastic-agent-fips, datadog-agent, rke2-runtime-fips, k3s, beats, containerd, frankenphp-8.2, loki, commercial-grafana, commercial-expanso-edge, fuse-overlayfs-snapshotter, frankenphp-8.5, grafana-fips, kine, mattermost-fips, zot,...