https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T04:49:11.503468+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-elasticsearch-2024-23444 BIT-elasticsearch-2024-23444 — Elasticsearch elasticsearch-certutil csr fails to encrypt private key 2026-10-08T04:49:11.528657+00:00

Affected: Bitnami: elasticsearch

It was discovered by Elastic engineering that when elasticsearch-certutil CLI tool is used with the csr option in order to create a new Certificate Signing Requests, the associated private key that is generated is stored on disk unencrypted even if the --pass parameter is passed in the command invocation.

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0640 certfr-2024-avi-0640 — Une vulnérabilité a été découverte dans Elastic Elasticsearch. Elle permet à un attaquant de provoquer une atteinte à l… 2026-10-08T04:49:11.528716+00:00 certfr-2024-avi-0640 https://cve.radiocsirt.org/vuln/euvd-2026-227242 EUVD-2026-227242 2026-10-08T04:49:11.528736+00:00 EUVD-2026-227242 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23444 fkie_cve-2024-23444 2026-10-08T04:49:11.528750+00:00

It was discovered by Elastic engineering that when elasticsearch-certutil CLI tool is used with the csr option in order to create a new Certificate Signing Requests, the associated private key that is generated is stored on disk unencrypted even if the --pass parameter is passed in the command invocation.

 https://cve.radiocsirt.org/vuln/ghsa-5v8f-xx9m-wj44 GHSA-5v8f-xx9m-wj44 — Elasticsearch stores private key on disk unencrypted 2026-10-08T04:49:11.528772+00:00

Affected: Maven: org.elasticsearch:elasticsearch

It was discovered by Elastic engineering that when elasticsearch-certutil CLI tool is used with the csr option in order to create a new Certificate Signing Requests, the associated private key that is generated is stored on disk unencrypted even if the `--pass` parameter is passed in the command invocation.

 https://cve.radiocsirt.org/vuln/gsd-2024-23444 gsd-2024-23444 2026-10-08T04:49:11.528794+00:00 gsd-2024-23444 https://cve.radiocsirt.org/vuln/msrc_cve-2024-23444 msrc_CVE-2024-23444 — Elasticsearch elasticsearch-certutil csr fails to encrypt private key 2026-10-08T04:49:11.528806+00:00 msrc_CVE-2024-23444 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-23444 UBUNTU-CVE-2024-23444 2026-10-08T04:49:11.528821+00:00

Affected: Ubuntu:16.04:LTS: elasticsearch

It was discovered by Elastic engineering that when elasticsearch-certutil CLI tool is used with the csr option in order to create a new Certificate Signing Requests, the associated private key that is generated is stored on disk unencrypted even if the --pass parameter is passed in the command invocation.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1739 WID-SEC-W-2024-1739 — Elasticsearch: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-08T04:49:11.528838+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Elasticsearch ausnutzen, um Informationen offenzulegen.