CVE-2025-37731 - Elasticsearch Improper Authentication

CVE ID : CVE-2025-37731 Published : Dec. 15, 2025, 10:42 a.m. | 43 minutes ago Description : Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a crafted client certificate signed by a legitimate, trusted Certificate Authority. Severity: 6.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor