Skip to content

Vulnerabilities of Elastic Eck Operator

Is your version affected?

CVE Summary Score Published
CVE-2026-78600 Incomplete Cleanup (CWE-459) in Elastic Cloud on Kubernetes (ECK) can lead to unauthorized access via Privilege Abuse… 3.5 Low Sep 2, 2026
CVE-2026-78609 Incorrect Authorization (CWE-863) in Elastic Cloud on Kubernetes (ECK) can lead to unauthorized modification of data via… 5.4 Medium Sep 2, 2026
CVE-2026-72640 The Elastic Cloud on Kubernetes (ECK) operator reads a list of secret references from an annotation on secrets it… 6.5 Medium Aug 13, 2026
CVE-2026-72648 Cleartext Storage of Sensitive Information in an Environment Variable (CWE-526) in Elastic Cloud on Kubernetes (ECK) can… 6.5 Medium Aug 13, 2026

Other Elastic products