Tag

#Elastic Cloud Enterprise

newsMEDIUM 6.4

CVE-2026-115711: Elastic Cloud Enterprise Credential Disclosure Vulnerability

A vulnerability in Elastic Cloud Enterprise (ECE) can lead to credential disclosure, allowing an attacker to add an unauthorized host to the installation. The vulnerability has a CVSS score of 6.4 and is classified as medium severity. Affected versions include ECE 1.0.0 to 3.8.5 and 4.0.0 to 4.2.0.

1 source
articleMEDIUM 6.4

CVE-2026-115707: Critical Privilege Escalation Vulnerability in Elastic Cloud Enterprise

A critical vulnerability, CVE-2026-115707, with a CVSS score of 6.4, has been discovered in Elastic Cloud Enterprise (ECE). This vulnerability allows for privilege escalation via the insertion of sensitive information into externally-accessible files or directories. An attacker controlling any host in the installation can exploit this to gain full control of the ECE control plane and managed deployments. Immediate patching is recommended for versions 2.6.0 to 3.8.5 and 4.0.0 to 4.2.0.

1 source