CVE-2026-72648
Cleartext Storage of Sensitive Information in an Environment Variable in Elastic Cloud on Kubernetes Leading to Information Disclosure
CVSS score
6.5
EPSS probability
%0.4
Risk score
0.0
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
6.8
CVE-2015-1427 Actively exploitedelasticsearch: remote code execution via Groovy sandbox bypass
Patch verified Public Exploits:9EPSS %100
6.8
CVE-2014-3120 Actively exploitedelasticsearch: remote code execution flaw via dynamic scripting
VendorRed HatProduct6Server-SubscriptionAssetManager14:katello-configure-0:1.4.5.1-3.el6sam.noarch+8 etkilenen
RH
Patch verified Public Exploits:7EPSS %89
9.8
CVE-2026-33466Path traversal in Elastic Logstash
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-72648"