https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-30T23:28:31.004865+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/certfr-2026-avi-1419 certfr-2026-avi-1419 — De multiples vulnérabilités ont été découvertes dans Elastic Cloud Enterprise. Certaines d'entre elles permettent à un… 2026-10-30T23:28:31.065678+00:00 certfr-2026-avi-1419 https://db.gcve.eu/vuln/fkie_cve-2026-115707 fkie_cve-2026-115707 2026-10-30T23:28:31.065753+00:00

Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (ECE) can lead to privilege escalation via Retrieve Embedded Sensitive Data (CAPEC-37). After the ECE certificate rotation procedure runs, data that it retains contains platform credentials and certificate authority private keys, and lower-privileged platform components can read this data. An attacker who controls any host in the installation can use this data to get full control of the ECE control plane and of the deployments that it manages.

 https://db.gcve.eu/vuln/ghsa-j27j-r2hf-x7q7 GHSA-j27j-r2hf-x7q7 2026-10-30T23:28:31.065807+00:00

Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise (ECE) can lead to privilege escalation via Retrieve Embedded Sensitive Data (CAPEC-37). After the ECE certificate rotation procedure runs, data that it retains contains platform credentials and certificate authority private keys, and lower-privileged platform components can read this data. An attacker who controls any host in the installation can use this data to get full control of the ECE control plane and of the deployments that it manages.