CVE-2026-33467 | BDVDB-2026-329461 Detail
ElasticElastic Package Registry
Description#
Improper Verification of Cryptographic Signature (CWE-347) in Elastic Package Registry could allow an attacker positioned to intercept network traffic, or to otherwise influence the contents served to a self-hosted registry, to substitute a tampered package without the integrity check failing closed.
Impact#
CAPEC-94 Adversary in the Middle (AiTM)
Weaknesses#
- CWE-347 Improper Verification of Cryptographic Signature
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.