Skip to content

CVE record · 1 source

CVE-2026-115706

CVSS 6.8

Authorization Bypass Through User-Controlled Key (CWE-639) in Elastic Cloud Enterprise (ECE) can lead to privilege escalation via Privilege Abuse…

Vendor: Elastic
Product: Elastic Cloud Enterprise
CVSS v3.1: 6.8 AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-639
Exposure class: Database

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

14

CVE NVD 2d ago

Authorization Bypass Through User-Controlled Key (CWE-639) in Elastic Cloud Enterprise (ECE) can lead to privilege escalation via Privilege Abuse…

Authorization Bypass Through User-Controlled Key (CWE-639) in Elastic Cloud Enterprise (ECE) can lead to privilege escalation via Privilege Abuse (CAPEC-122). An attacker who controls any host in an ECE installation can obtain…

CVSS 6.8 CVE-2026-115706 Elastic