CVE-2026-115714

Improper Certificate Validation CWE-295 in the operating system certificate bundle shipped in the Docker images of APM Server; Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat; Elastic Agent, including Fleet Server and Cloudbeat; Logstash, for TLS connections that use the operating syste...

EUVD-2026-116082

Improper Certificate Validation CWE-295 in the operating system certificate bundle shipped in the Docker images of APM Server; Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat; Elastic Agent, including Fleet Server and Cloudbeat; Logstash, for TLS connections that use the operating syste...

CVE-2026-115714

Several Elastic products shipped in Docker images are vulnerable to Improper Certificate Validation (CWE-295) due to a compromised third-party dependency. The operating system certificate bundle includes root CAs that signed eight eMudhra intermediate CAs with compromised private keys. This allow...

Multiple Elastic Docker images 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-237)

Improper Certificate Validation in Elastic Docker Images Leading to Interception of TLS Connections Improper Certificate Validation CWE-295 in the operating system certificate bundle shipped in the Docker images of APM Server Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat Elastic Agent...

Elastic Agent “Complete Flavor” (Synthetics) 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-231)

Improper Certificate Validation in Elastic Agent Leading to Interception of TLS Connections Improper Certificate Validation CWE-295 in the Node.js runtime bundled with the Elastic Agent “Complete Flavor” Docker images that include Synthetics, a dependency of Elastic Agent “Complete Flavor”...

Heartbeat 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-230)

Improper Certificate Validation in Heartbeat Leading to Interception of TLS Connections Improper Certificate Validation CWE-295 in the Node.js runtime bundled with the Heartbeat Docker image, a dependency of Heartbeat Dependency on Vulnerable Third-Party Component, CWE-1395, could allow an attack...

Kibana 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-229)

Improper Certificate Validation in Kibana Leading to Interception of TLS Connections Improper Certificate Validation CWE-295 in the Node.js runtime bundled with Kibana, a dependency of Kibana Dependency on Vulnerable Third-Party Component, CWE-1395, could allow an attacker to intercept or modify...

Logstash 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-228)

Improper Certificate Validation in Logstash Leading to Interception of TLS Connections Improper Certificate Validation CWE-295 in the Java runtime bundled with Logstash, a dependency of Logstash Dependency on Vulnerable Third-Party Component, CWE-1395, could allow an attacker to intercept or modi...

Elasticsearch 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-227)

Improper Certificate Validation in Elasticsearch Leading to Interception of TLS Connections Improper Certificate Validation CWE-295 in the Java runtime bundled with Elasticsearch, a dependency of Elasticsearch Dependency on Vulnerable Third-Party Component, CWE-1395, could allow an attacker to...

LabAutomationCVE-2021-43798

LabAutomationCVE-2021-43798 I make a script for pentest automation where i exploit CVE-2021-43798 a path traversal on Grafana to steal user secrets SSH key and then gain privileges on a Linux system using SUID. I automate this lab to share the pentest methodology...

CVE-2026-67598

CVE-2026-67598 Emlog Pro — Disabled TLS Certificate Validation in the AI Assistant Network-adjacent MITM → LLM-provider API-key theft & AI-response injection Summary · Attack Flow · Affected Code · Proof · Remediation · Timeline · References 📋 At a glance | ---|--- CVE ID| CVE-2026-67598 Product|...

CVE-2015-3306

CVE-2015-3306 This contains single-file exploit for ProFTPd 1.3.5 modcopy CVE-2015-3306 vulnerability, especially for TryHackMe Kenobi Lab. Vulnerability Description CVE-2015-3306 is a vulnerability found in ProFTPd 1.3.5 due to a flaw in the modcopy module, which is responsible for enabling FTP...

Pixnapping-Attack-on-Android

This article examines the evolution of security threats in the cryptocurrency storage space, focusing on modern methods for compromising private keys and seed phrases, which secure digital wallets. The modern cryptocurrency ecosystem faces a growing threat of cyberattacks aimed at compromising...

CVE-2026-61654 Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key

Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook POST /api/v1/projects/projectUuid/dbt-cloud/webhook has no authentication middleware or signature validation. In packages/backend/src/controllers/projectController.ts,...

CVE-2026-61654 Lightdash: Unauthenticated dbt Cloud webhook with path injection leaks API key

Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook POST /api/v1/projects/projectUuid/dbt-cloud/webhook has no authentication middleware or signature validation. In packages/backend/src/controllers/projectController.ts,...

CVE-2026-61654

The business intelligence platform Lightdash (versions through 0.3213.0) contains a vulnerability in the dbt Cloud webhook endpoint (POST /api/v1/projects/{projectUuid}/dbt-cloud/webhook). The issue stems from a lack of authentication middleware or signature validation, combined with path injecti...

CVE-2026-61576

The open-source business intelligence platform Lightdash (versions through 0.3213.0) contains an unauthenticated dbt Cloud webhook at POST /api/v1/projects/{projectUuid}/dbt-cloud/webhook lacking authentication middleware or signature validation. The vulnerability resides in packages/backend/src/...

CVE-2026-61576: lightdash: Lightdash is an open source business intelligence platform

Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook POST /api/v1/projects/projectUuid/dbt-cloud/webhook has no authentication middleware or signature validation. In packages/backend/src/controllers/projectController.ts,...

CVE-2026-105765 Consul vulnerable to an authorization bypass in the agent's service mesh leaf certificate API

HashiCorp Consul and Consul Enterprise 1.17.0 up to 2.0.4 are vulnerable to an authorization bypass in the agent's service mesh leaf certificate API that may allow an attacker without a valid ACL token to retrieve a cached service leaf certificate and its private key. This vulnerability...

CVE-2026-114662 Obot before 0.26.0 API Key Theft via CLI Login Token Request

Obot before 0.26.0 contains an authentication bypass vulnerability in the CLI login flow that allows unauthenticated attackers to steal API keys by choosing token request IDs. Attackers can create a token request via POST /api/token-request, send the login link to a signed-in user, and fetch the...