{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/logstash/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.4,"id":"CVE-2026-115714"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["APM Server","Auditbeat","Filebeat","Heartbeat","Metricbeat","Packetbeat","Elastic Agent","Fleet Server","Cloudbeat","Logstash","Elastic connectors","Universal Profiling","Elastic Maps Server"],"_cs_severities":["high"],"_cs_tags":["vulnerability","cve","elastic","tls","mitm"],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eCVE-2026-115714 identifies an improper certificate validation vulnerability (CWE-295) affecting the operating system certificate bundle used by several Elastic products, including APM Server, various Beats (Auditbeat, Filebeat, Heartbeat, Metricbeat, Packetbeat), Elastic Agent (including Fleet Server and Cloudbeat), Logstash, Elastic connectors, Universal Profiling, and Elastic Maps Server. The bundle includes eight eMudhra intermediate certificate authorities whose private keys are compromised. This allows an attacker in a network position between the product and a remote party to intercept or modify TLS-protected traffic by presenting a certificate issued by these compromised keys.\u003c/p\u003e\n","date_modified":"2026-11-03T20:01:47Z","date_published":"2026-11-03T20:01:47Z","id":"https://feed.craftedsignal.io/briefs/2026-11-elastic-cve-2026-115714/","summary":"Multiple Elastic products are vulnerable to TLS interception due to a dependency on an operating system certificate bundle containing eight compromised eMudhra intermediate certificate authorities.","title":"Elastic: Improper certificate validation in OS certificate bundles (CVE-2026-115714)","url":"https://feed.craftedsignal.io/briefs/2026-11-elastic-cve-2026-115714/"}],"language":"en","title":"CraftedSignal Threat Feed - Logstash","version":"https://jsonfeed.org/version/1.1"}