165 matches found
CVE-2026-115714
Improper Certificate Validation CWE-295 in the operating system certificate bundle shipped in the Docker images of APM Server; Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat; Elastic Agent, including Fleet Server and Cloudbeat; Logstash, for TLS connections that use the operating syste...
CVE-2026-115714 Improper Certificate Validation in Elastic Docker Images Leading to Interception of TLS Connections
Improper Certificate Validation CWE-295 in the operating system certificate bundle shipped in the Docker images of APM Server; Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat; Elastic Agent, including Fleet Server and Cloudbeat; Logstash, for TLS connections that use the operating syste...
EUVD-2026-116082
Improper Certificate Validation CWE-295 in the operating system certificate bundle shipped in the Docker images of APM Server; Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat; Elastic Agent, including Fleet Server and Cloudbeat; Logstash, for TLS connections that use the operating syste...
CVE-2026-115714
Several Elastic products shipped in Docker images are vulnerable to Improper Certificate Validation (CWE-295) due to a compromised third-party dependency. The operating system certificate bundle includes root CAs that signed eight eMudhra intermediate CAs with compromised private keys. This allow...
Multiple Elastic Docker images 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-237)
Improper Certificate Validation in Elastic Docker Images Leading to Interception of TLS Connections Improper Certificate Validation CWE-295 in the operating system certificate bundle shipped in the Docker images of APM Server Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat Elastic Agent...
Elastic Agent 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-234)
Out-of-bounds Write in Elastic Agent Leading to Remote Code Execution Out-of-bounds Write CWE-787 in the Brotli decoder of Node.js, a dependency of Elastic Agent Dependency on Vulnerable Third-Party Component, CWE-1395, could allow an attacker to cause a crash, disclose process memory, or...
Elastic Agent “Complete Flavor” (Synthetics) 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-231)
Improper Certificate Validation in Elastic Agent Leading to Interception of TLS Connections Improper Certificate Validation CWE-295 in the Node.js runtime bundled with the Elastic Agent “Complete Flavor” Docker images that include Synthetics, a dependency of Elastic Agent “Complete Flavor”...
agent-skills
Elastic Agent Skills Elastic Agent Skills — built by the people who built Elastic — deliver native platform expertise directly to your AI coding agent. This is the official Agent Skills library, compatible with agentic IDEs such as Cursor, GitHub Copilot, Windsurf, Gemini CLI, and more. Skills...
osquery_cve-2024-23443
Proof of Concept POC CVE-2024-23443 hpbiososquery Add osqery extension HP BIOS WMI to Elastic Agent Dependencies pip install pywin32 pip install osquery pip install pyinstaller Build pyinstaller --onefile hpbiosenumeration.py Install 1. Copy extension to Elastic agent location copy...
CVE-2026-63209 vulnerabilities
Vulnerabilities for packages: commercial-kyverno, loki, kyverno, commercial-expanso-edge, kine, telegraf, commercial-grafana, elastic-agent-fips, prometheus-operator, helm, omnictl-multiarch, nerdctl, flux, kots, backup-restore-operator, k3d, aactl, prometheus, snyk-cli, spire-server,...
Elastic Agent 8.19.13 < 8.19.22 / 9.2.7 <= 9.2.8 / 9.3.x <= 9.3.8 / 9.4.x < 9.4.8 / 9.5.x < 9.5.5 DoS (ESA-2026-194)
The version of Elastic Agent / Elastic Endpoint installed on the remote Windows host is 8.19.13 through 8.19.21, or 9.2.7 through 9.2.8, or 9.3.x through 9.3.8, or 9.4.x prior to 9.4.8, or 9.5.x prior to 9.5.5. It is, therefore, affected by a denial of service vulnerability as referenced in the...
Elastic Agent / Endpoint 8.19.22, 9.4.8, and 9.5.5 Security Update (ESA-2026-194)
Uncaught Exception in Elastic Endpoint Leading to Denial of Service Uncaught Exception CWE-248 in Elastic Endpoint can lead to denial of service via a specially crafted file name. When Elastic Defend's Elastic Endpoint component processes a file name under certain system locale configurations...
GO-2026-6615 vulnerabilities
Vulnerabilities for packages: starboard-exporter, kubescape-operator-fips, grafana-fips, kubescape-server, kubescape-server-fips, elastic-agent-fips, redpanda-operator, kubescape-operator, traefik-fips, traefik, grafana, kubescape, starboard-exporter-fips, elastic-agent...
GHSA-HJF4-FPHR-2H65 vulnerabilities
Vulnerabilities for packages: starboard-exporter, kubescape-operator-fips, grafana-fips, kubescape-server, kubescape-server-fips, elastic-agent-fips, redpanda-operator, kubescape-operator, traefik-fips, traefik, grafana, kubescape, starboard-exporter-fips, elastic-agent...
CVE-2026-81872 vulnerabilities
Vulnerabilities for packages: starboard-exporter, kubescape-operator-fips, grafana-fips, kubescape-server, kubescape-server-fips, elastic-agent-fips, redpanda-operator, kubescape-operator, traefik-fips, traefik, grafana, kubescape, starboard-exporter-fips, elastic-agent...
BIT-KIBANA-2026-78582 Missing Authorization in Kibana Leading to Unauthorized Deletion of Data
Missing Authorization CWE-862 in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding Synthetics privileges scoped to a single Kibana space could permanently delete Synthetics monitors that a...
BIT-ELK-2026-78582 Missing Authorization in Kibana Leading to Unauthorized Deletion of Data
Missing Authorization CWE-862 in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding Synthetics privileges scoped to a single Kibana space could permanently delete Synthetics monitors that a...
PT-2026-105099
Missing Authorization CWE-862 in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding Synthetics privileges scoped to a single Kibana space could permanently delete Synthetics monitors that a...
CVE-2026-78582
Missing Authorization CWE-862 in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding Synthetics privileges scoped to a single Kibana space could permanently delete Synthetics monitors that a...
CVE-2026-78582
Missing Authorization CWE-862 in Kibana can lead to unauthorized deletion of data via Exploiting Incorrectly Configured Access Control Security Levels CAPEC-180. An authenticated user holding Synthetics privileges scoped to a single Kibana space could permanently delete Synthetics monitors that a...