{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Heartbeat versions 8.x ant\u00e9rieures \u00e0 8.19.24",
      "product": {
        "name": "Heartbeat",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Elasticsearch versions 9.5.x ant\u00e9rieures \u00e0 9.5.6",
      "product": {
        "name": "Elasticsearch",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "APM Server versions 9.5.x ant\u00e9rieures \u00e0 9.5.6",
      "product": {
        "name": "APM Server",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Heartbeat versions 9.x ant\u00e9rieures \u00e0 9.4.9",
      "product": {
        "name": "Heartbeat",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Kibana versions 8.x ant\u00e9rieures \u00e0 8.19.24",
      "product": {
        "name": "Kibana",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Elasticsearch versions 9.x ant\u00e9rieures \u00e0 9.4.9",
      "product": {
        "name": "Elasticsearch",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Packetbeat versions 8.x ant\u00e9rieures \u00e0 8.19.24",
      "product": {
        "name": "Packetbeat",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Logstash versions 9.x ant\u00e9rieures \u00e0 9.4.9",
      "product": {
        "name": "Logstash",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Elastic Agent versions 9.5.x ant\u00e9rieures \u00e0 9.5.6",
      "product": {
        "name": "Elastic Agent",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Kibana versions 9.x ant\u00e9rieures \u00e0 9.4.9",
      "product": {
        "name": "Kibana",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Elastic Maps Server versions 8.x ant\u00e9rieures \u00e0 8.19.24",
      "product": {
        "name": "Elastic Maps Server",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Elastic Maps Server versions 9.x ant\u00e9rieures \u00e0 9.4.9",
      "product": {
        "name": "Elastic Maps Server",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Logstash versions 9.5.x ant\u00e9rieures \u00e0 9.5.6",
      "product": {
        "name": "Logstash",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Elastic Agent versions 8.x ant\u00e9rieures \u00e0 8.19.24",
      "product": {
        "name": "Elastic Agent",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Elastic Maps Server versions 9.5.x ant\u00e9rieures \u00e0 9.5.6",
      "product": {
        "name": "Elastic Maps Server",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Heartbeat versions 9.5.x ant\u00e9rieures \u00e0 9.5.6",
      "product": {
        "name": "Heartbeat",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Packetbeat versions 9.x ant\u00e9rieures \u00e0 9.4.9",
      "product": {
        "name": "Packetbeat",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "APM Server versions 9.x ant\u00e9rieures \u00e0 9.4.9",
      "product": {
        "name": "APM Server",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Kibana versions 9.5.x ant\u00e9rieures \u00e0 9.5.6",
      "product": {
        "name": "Kibana",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Logstash versions 8.x ant\u00e9rieures \u00e0 8.19.24",
      "product": {
        "name": "Logstash",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Elastic Docker Images versions 9.x ant\u00e9rieures \u00e0 9.4.9",
      "product": {
        "name": "Elastic Docker Images",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Elasticsearch versions 8.x ant\u00e9rieures \u00e0 8.19.24",
      "product": {
        "name": "Elasticsearch",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Packetbeat versions 9.5.x ant\u00e9rieures \u00e0 9.5.6",
      "product": {
        "name": "Packetbeat",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "APM Server versions 8.x ant\u00e9rieures \u00e0 8.19.24",
      "product": {
        "name": "APM Server",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Elastic Docker Images versions 8.x ant\u00e9rieures \u00e0 8.19.24",
      "product": {
        "name": "Elastic Docker Images",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Elastic Agent versions 9.x ant\u00e9rieures \u00e0 9.4.9",
      "product": {
        "name": "Elastic Agent",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    },
    {
      "description": "Elastic Docker Images versions 9.5.x ant\u00e9rieures \u00e0 9.5.6",
      "product": {
        "name": "Elastic Docker Images",
        "vendor": {
          "name": "Elastic",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-115292",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-115292"
    },
    {
      "name": "CVE-2026-91403",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-91403"
    },
    {
      "name": "CVE-2026-115710",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-115710"
    },
    {
      "name": "CVE-2026-115289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-115289"
    },
    {
      "name": "CVE-2026-115298",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-115298"
    },
    {
      "name": "CVE-2026-115715",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-115715"
    },
    {
      "name": "CVE-2026-115294",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-115294"
    },
    {
      "name": "CVE-2026-114406",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-114406"
    },
    {
      "name": "CVE-2026-115293",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-115293"
    },
    {
      "name": "CVE-2026-115714",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-115714"
    },
    {
      "name": "CVE-2026-115290",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-115290"
    },
    {
      "name": "CVE-2026-115716",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-115716"
    },
    {
      "name": "CVE-2026-114820",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-114820"
    },
    {
      "name": "CVE-2026-115295",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-115295"
    },
    {
      "name": "CVE-2026-115297",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-115297"
    },
    {
      "name": "CVE-2026-111497",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-111497"
    }
  ],
  "initial_release_date": "2026-11-04T00:00:00",
  "last_revision_date": "2026-11-04T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1461",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-11-04T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Elastic. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Elastic",
  "vendor_advisories": [
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Elastic 391359",
      "url": "https://discuss.elastic.co/t/kibana-9-4-9-9-5-6-security-update-esa-2026-205/391359"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Elastic 391363",
      "url": "https://discuss.elastic.co/t/elasticsearch-8-19-24-9-4-9-9-5-6-security-update-esa-2026-210/391363"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Elastic 391373",
      "url": "https://discuss.elastic.co/t/apm-server-8-19-24-9-4-9-9-5-6-security-update-esa-2026-236/391373"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Elastic 391358",
      "url": "https://discuss.elastic.co/t/kibana-8-19-24-9-4-9-9-5-6-security-update-esa-2026-204/391358"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Elastic 391371",
      "url": "https://discuss.elastic.co/t/elastic-agent-8-19-24-9-4-9-9-5-6-security-update-esa-2026-234/391371"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Elastic 391360",
      "url": "https://discuss.elastic.co/t/kibana-8-19-24-9-4-9-9-5-6-security-update-esa-2026-206/391360"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Elastic 391361",
      "url": "https://discuss.elastic.co/t/packetbeat-8-19-24-9-4-9-9-5-6-security-update-esa-2026-208/391361"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Elastic 391357",
      "url": "https://discuss.elastic.co/t/kibana-8-19-24-9-4-9-9-5-6-security-update-esa-2026-203/391357"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Elastic 391369",
      "url": "https://discuss.elastic.co/t/kibana-8-19-24-9-4-9-9-5-6-security-update-esa-2026-232/391369"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Elastic 391374",
      "url": "https://discuss.elastic.co/t/multiple-elastic-docker-images-8-19-24-9-4-9-9-5-6-security-update-esa-2026-237/391374"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Elastic 391355",
      "url": "https://discuss.elastic.co/t/apm-server-8-19-24-9-4-9-9-5-6-security-update-esa-2026-200/391355"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Elastic 391372",
      "url": "https://discuss.elastic.co/t/elasticsearch-8-19-24-9-4-9-9-5-6-security-update-esa-2026-235/391372"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Elastic 391356",
      "url": "https://discuss.elastic.co/t/elasticsearch-8-19-24-9-4-9-9-5-6-security-update-esa-2026-201/391356"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Elastic 391368",
      "url": "https://discuss.elastic.co/t/elastic-agent-complete-flavor-synthetics-8-19-24-9-4-9-9-5-6-security-update-esa-2026-231/391368"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Elastic 391362",
      "url": "https://discuss.elastic.co/t/elasticsearch-8-19-24-9-4-9-9-5-6-security-update-esa-2026-209/391362"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Elastic 391366",
      "url": "https://discuss.elastic.co/t/kibana-8-19-24-9-4-9-9-5-6-security-update-esa-2026-229/391366"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Elastic 391370",
      "url": "https://discuss.elastic.co/t/heartbeat-8-19-24-9-4-9-9-5-6-security-update-esa-2026-233/391370"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Elastic 391364",
      "url": "https://discuss.elastic.co/t/elasticsearch-8-19-24-9-4-9-9-5-6-security-update-esa-2026-227/391364"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Elastic 391367",
      "url": "https://discuss.elastic.co/t/heartbeat-8-19-24-9-4-9-9-5-6-security-update-esa-2026-230/391367"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Elastic 391365",
      "url": "https://discuss.elastic.co/t/logstash-8-19-24-9-4-9-9-5-6-security-update-esa-2026-228/391365"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Elastic 391375",
      "url": "https://discuss.elastic.co/t/elastic-maps-server-8-19-24-9-4-9-9-5-6-security-update-esa-2026-238/391375"
    }
  ]
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-115714",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-11-03T17:28:12.980614Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-03T17:28:19.774Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Elastic Docker images",
          "vendor": "Elastic",
          "versions": [
            {
              "lessThanOrEqual": "8.19.23",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "9.4.8",
              "status": "affected",
              "version": "9.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "9.5.5",
              "status": "affected",
              "version": "9.5.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eImproper Certificate Validation (CWE-295) in the operating system certificate bundle shipped in the Docker images of APM Server; Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat; Elastic Agent, including Fleet Server and Cloudbeat; Logstash, for TLS connections that use the operating system certificate bundle; Elastic connectors; Universal Profiling (host agent, collector and symbolizer); and Elastic Maps Server. This certificate bundle, a dependency of these products (Dependency on Vulnerable Third-Party Component, CWE-1395), could allow an attacker to intercept or modify TLS-protected traffic via Signature Spoofing by Key Theft (CAPEC-474). The certificate bundle includes root certificate authorities that signed eight eMudhra intermediate certificate authorities whose private keys are compromised. Anyone with these keys can issue a certificate for any host name that these products accept as trusted. Exploitation requires an attacker in a network position between the product and the remote party, who presents a certificate issued with one of the compromised keys.\u003c/p\u003e"
            }
          ],
          "value": "Improper Certificate Validation (CWE-295) in the operating system certificate bundle shipped in the Docker images of APM Server; Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat; Elastic Agent, including Fleet Server and Cloudbeat; Logstash, for TLS connections that use the operating system certificate bundle; Elastic connectors; Universal Profiling (host agent, collector and symbolizer); and Elastic Maps Server. This certificate bundle, a dependency of these products (Dependency on Vulnerable Third-Party Component, CWE-1395), could allow an attacker to intercept or modify TLS-protected traffic via Signature Spoofing by Key Theft (CAPEC-474). The certificate bundle includes root certificate authorities that signed eight eMudhra intermediate certificate authorities whose private keys are compromised. Anyone with these keys can issue a certificate for any host name that these products accept as trusted. Exploitation requires an attacker in a network position between the product and the remote party, who presents a certificate issued with one of the compromised keys."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-474",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-474 Signature Spoofing by Key Theft"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "CWE-295 Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-03T16:44:18.729Z",
        "orgId": "271b6943-45a9-4f3a-ab4e-976f3fa05b5a",
        "shortName": "elastic"
      },
      "references": [
        {
          "url": "https://discuss.elastic.co/t/multiple-elastic-docker-images-8-19-24-9-4-9-9-5-6-security-update-esa-2026-237/391374"
        }
      ],
      "source": {
        "discovery": "Elastic"
      },
      "title": "Improper Certificate Validation in Elastic Docker Images Leading to Interception of TLS Connections",
      "x_generator": {
        "engine": "Elastic CVE Publisher 1.0.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "271b6943-45a9-4f3a-ab4e-976f3fa05b5a",
    "assignerShortName": "elastic",
    "cveId": "CVE-2026-115714",
    "datePublished": "2026-11-03T16:44:18.729Z",
    "dateReserved": "2026-10-23T11:09:48.310Z",
    "dateUpdated": "2026-11-03T17:28:19.774Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}