Improper Certificate Validation in Elastic Products and Docker Images

CVE-2026-115714

What is CVE-2026-115714?

This vulnerability stems from improper certificate validation within the operating system certificate bundle included in various Elastic products deployed via Docker images. Attackers can exploit this flaw to intercept or modify traffic secured with TLS connections by leveraging compromised keys from specific intermediate certificate authorities. If an attacker successfully executes a man-in-the-middle (MitM) attack, they can pose as a trusted entity, undermining the integrity of data transmitted between users and services relying on this certificate bundle. Awareness of this vulnerability is critical for users of affected Elastic products to enhance their security posture against potential exploits.

References