Advisories · Technology

Elastic Eck Operator.

Every CVE that names Elastic Eck Operator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-78600 CVE record

CVSS 3.5 Low

Incomplete Cleanup in Elastic Cloud on Kubernetes Leading to Unauthorized Cross-Namespace Credential Retention
- Elastic Eck Operator
- CWE-459
Not analysed yet 2 Sept 2026
CVE-2026-78609 CVE record

CVSS 5.4 Medium

Incorrect Authorization in Elastic Cloud on Kubernetes Leading to Unauthorized Modification of Data
- Elastic Eck Operator
- Broken access control
Not analysed yet 2 Sept 2026
CVE-2026-72640 CVE record

CVSS 6.5 Medium

Unintended Proxy or Intermediary in Elastic Cloud on Kubernetes Leading to Cross-Namespace Secret Disclosure
- Elastic Eck Operator
- CWE-441
Not analysed yet 13 Aug 2026
CVE-2026-72648 CVE record

CVSS 6.5 Medium

Cleartext Storage of Sensitive Information in an Environment Variable in Elastic Cloud on Kubernetes Leading to Information Disclosure
- Elastic Eck Operator
- CWE-526
Not analysed yet 13 Aug 2026