CVE-2026-78604

概要

参考情報

• discuss.elastic.co/t/elastic-agent-8-19-21-9-4-6-9-5-2-security-update-esa-2026-150/390109 · Vendor Advisory

elastic agent のその他の脆弱性

• CVE-2024-52976高 7.8Inclusion of functionality from an untrusted control sphere in Elastic Agent subprocess, osqueryd, allows local attackers to execute arbitra…
• CVE-2023-46669高 7.1Exposure of sensitive information to local unauthorized actors in Elastic Agent and Elastic Security Endpoint can lead to loss of confidenti…
• CVE-2024-37283中 6.5An issue was discovered whereby Elastic Agent will leak secrets from the agent policy elastic-agent.yml only when the log level is configure…
• CVE-2023-6687中 6.5An issue was discovered by Elastic whereby Elastic Agent would log a raw event in its own logs at the WARN or ERROR level if ingesting that …
• CVE-2023-31421高 7.5It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify whether the server cert…