CVE-2026-115714

Improper Certificate Validation (CWE-295) in the operating system certificate bundle shipped in the Docker images of APM Server; Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat; Elastic Agent, including Fleet Server and Cloudbeat; Logstash, for TLS connections that use the operating system certificate bundle; Elastic connectors; Universal Profiling (host agent, collector and symbolizer); and Elastic Maps Server. This certificate bundle, a dependency of these products (Dependency on Vulnerable Third-Party Component, CWE-1395), could allow an attacker to intercept or modify TLS-protected traffic via Signature Spoofing by Key Theft (CAPEC-474). The certificate bundle includes root certificate authorities that signed eight eMudhra intermediate certificate authorities whose private keys are compromised. Anyone with these keys can issue a certificate for any host name that these products accept as trusted. Exploitation requires an attacker in a network position between the product and the remote party, who presents a certificate issued with one of the compromised keys.

• CWE-295

• https://discuss.elastic.co/t/multiple-elastic-docker-images-8-19-24-9-4-9-9-5-6-security-update-esa-2026-237/391374

Published

Nov 3, 2026

Last Modified

Nov 3, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-115709Improper Link Resolution Before File Access ('Link Following…8.2
• CVE-2026-11571The Everest Forms WordPress plugin before 3.5.0 does not re…7.5
• CVE-2026-115710Use of Cache Containing Sensitive Information (CWE-524) in E…4.2
• CVE-2026-115711Insertion of Sensitive Information into Externally-Accessibl…6.4
• CVE-2026-115712Incorrect Authorization (CWE-863) in Elastic Cloud Enterpris…4.3
• CVE-2026-115713Improper Link Resolution Before File Access ('Link Following…7.5
• CVE-2026-115715Allocation of Resources Without Limits or Throttling (CWE-77…6.5
• CVE-2026-115716Allocation of Resources Without Limits or Throttling (CWE-77…6.5
• CVE-2026-115717Frappe Builder versions before 1.36.1 contain a server-side …7.7
• CVE-2026-115718Frappe Builder versions 1.33.0 before1.36.0 contain a missin…4.3
• CVE-2026-11572Versions of the package degit before 2.8.6, from 3.0.0 and b…8.8
• CVE-2026-115720Frappe Builder before 1.36.1 contains a server-side request …5