CVE-2026-115714 | Elastic APM Server up to 8.19.23/9.4.8/9.5.5 Operating System Certificate Bundle certificate validation

A vulnerability identified as problematic has been detected in Elastic APM Server, Auditbeat, Cloudbeat, Elastic Agent, Elastic Connectors, Elastic Maps Server, Filebeat, Fleet Server, Heartbeat, Logstash, Metricbeat, Packetbeat and Universal Profiling up to 8.19.23/9.4.8/9.5.5. This issue affects some unknown processing of the component Operating System Certificate Bundle. Performing a manipulation results in improper certificate validation.

This vulnerability is reported as CVE-2026-115714. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More