CVE-2026-115706

MEDIUM CVSS 6.8
Published: 2026-10-29
Modified: 2026-10-30
Enriched via mock
Tenable Plugin

Checking the public Tenable catalog…

AI Threat Summary

CVE-2026-115706 is a moderate vulnerability with a CVSS score of 6.8 affecting elastic_cloud_enterprise, elastic_cloud_enterprise. Threat hunters should monitor for exploit attempts and apply vendor patches immediately.

Description

Authorization Bypass Through User-Controlled Key (CWE-639) in Elastic Cloud Enterprise (ECE) can lead to privilege escalation via Privilege Abuse (CAPEC-122). An attacker who controls any host in an ECE installation can obtain credentials that are reserved for other platform roles. These credentials can give the attacker full control of the ECE control plane and of the deployments that it manages.

Attack Chain
1
Initial Access

Attacker has low-privilege local access (e.g., via phishing or compromised service account)

2
Privilege Escalation

Attacker exploits CVE-2026-115706 to escalate from low-privilege user to root/SYSTEM/admin

3
Defense Evasion

Elevated privileges used to disable security controls, clear logs, and establish persistence

4
Impact

Full system compromise achieved; attacker can install ransomware, exfiltrate all data, or pivot

MITRE ATT&CK Techniques
T1068 Exploitation for Privilege Escalation
Privilege Escalation

Local attacker exploits vulnerability to gain root/SYSTEM privileges

T1134 Access Token Manipulation
Privilege Escalation

Elevated token used to impersonate high-privilege accounts

Indicators of Compromise
Type Value Description
user_agent Mozilla/5.0 (compatible; exploit/1.0) Generic exploit scanner user agent pattern
url /api/vuln-endpoint?payload=<malicious> Exploit attempt against elastic_cloud_enterprise endpoint — monitor access logs for anomalous params
Remediation
1. Apply vendor-supplied security patches immediately. 2. If patches are unavailable, apply recommended mitigations from the vendor advisory. 3. Enable WAF rules or IDS signatures to detect exploitation attempts. 4. Monitor logs for indicators of compromise listed above. 5. Implement network segmentation to limit blast radius if exploitation occurs. 6. Subscribe to vendor security advisories for this product.
Quick Facts
CVE ID CVE-2026-115706
CVSS Score 6.8
Vector CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Published 2026-10-29
Exploited No
CISA KEV No
PoC Not public
Affected Products
  • elastic / elastic_cloud_enterprise
  • elastic / elastic_cloud_enterprise
References
External Resources
NVD Entry BleepingComputer The Hacker News