CVE-2026-115707: Critical Privilege Escalation Vulnerability in Elastic Cloud Enterprise
A critical vulnerability, CVE-2026-115707, with a CVSS score of 6.4, has been discovered in Elastic Cloud Enterprise (ECE). This vulnerability allows for privilege escalation via the insertion of sensitive information into externally-accessible files or directories. An attacker controlling any host in the installation can exploit this to gain full control of the ECE control plane and managed deployments. Immediate patching is recommended for versions 2.6.0 to 3.8.5 and 4.0.0 to 4.2.0.