CLEANSTART-2026-EH27916 Security fixes in opensearch-k8s-operator-fips 2.8.0-r3

Package opensearch-k8s-operator-fips version 2.8.0-r3 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32289, CVE-2026-32282, CVE-2026-27140, CVE-2026-32288...

CLEANSTART-2026-TB08194 Security fixes in opensearch-k8s-operator-fips 2.5.1-r3

Package opensearch-k8s-operator-fips version 2.5.1-r3 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...

CLEANSTART-2026-QN62418 Security fixes in opensearch-dashboards-fips 3.5.0-r0

Package opensearch-dashboards-fips version 3.5.0-r0 fixes 30 vulnerabilities: ghsa-jg4p-7fhp-p32p, ghsa-2w6w-674q-4c4q, ghsa-9cx6-37pm-9jff, ghsa-r5fr-rjxr-66jc, ghsa-3v7f-55p6-f55p...

CVE-2026-46718 vulnerabilities

Vulnerabilities for packages: opensearch, opensearch-fips...

GHSA-C2RV-HWQM-WJPG vulnerabilities

Vulnerabilities for packages: opensearch, opensearch-fips...

CVE-2026-46718 vulnerabilities

Vulnerabilities for packages: opensearch...

GHSA-C2RV-HWQM-WJPG vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2026-65899 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, wazuh-dashboard, kibana, langfuse-fips, nextcloud-server, wazuh-dashboard-fips, langfuse, librechat...

CVE-2026-65898 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, wazuh-dashboard, kibana, langfuse-fips, nextcloud-server, wazuh-dashboard-fips, langfuse, librechat, opensearch-dashboards-fips...

CVE-2026-65903 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, wazuh-dashboard, kibana, langfuse-fips, nextcloud-server, wazuh-dashboard-fips, langfuse, librechat, opensearch-dashboards-fips...

CVE-2026-65903 vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse, opensearch-dashboards...

CVE-2026-65899 vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse, opensearch-dashboards...

EUVD-2026-46513

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: OpenSearch Dashboards. Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2026-47026

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: OpenSearch Dashboards. Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CLEANSTART-2026-OI70918 Security fixes for CVE-2026-33870, CVE-2026-34477, CVE-2026-34478, CVE-2026-34480, CVE-2026-41417, CVE-2026-42580, CVE-2026-42581, CVE-2026-42584, CVE-2026-42585, ghsa-2c5c-chwr-9hqw, ghsa-38f8-5428-x5cv, ghsa-72hv-8253-57qq, ghsa-f6hv-jmp6-3vwv, ghsa-m4cv-j2px-7723, ghsa-mj4r-2hfc-f8p6, ghsa-pwqr-wmgm-9rr8 applied in versions: 2.19.5-r0, 3.6.0-r4

Multiple security vulnerabilities affect the opensearch package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KT42152 Security fixes for CVE-2026-12143, CVE-2026-44979, CVE-2026-45249, CVE-2026-46625, CVE-2026-53550, CVE-2026-53655, ghsa-cmwh-pvxp-8882 applied in versions: 3.6.0-r4

Multiple security vulnerabilities affect the opensearch-dashboards-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-62010

Malcolm v26.07.0 adds IEC 60870-5-104 IEC 104 protocol support using CERT.LV's Zeek plugin, including Logstash parsing, ECS normalization, Arkime fields, and a new OpenSearch Dashboards dashboard. This release also fixes three archive extraction and authentication security vulnerabilities; improv...

PT-2026-62011

Malcolm v26.07.0 adds IEC 60870-5-104 IEC 104 protocol support using CERT.LV's Zeek plugin, including Logstash parsing, ECS normalization, Arkime fields, and a new OpenSearch Dashboards dashboard. This release also fixes three archive extraction and authentication security vulnerabilities; improv...

CVE-2026-56699

Wazuh Manager before 5.0.0-beta3 fails to escape the DataValue.index field when constructing OpenSearch bulk requests, allowing enrolled agents to inject arbitrary NDJSON operations. Attackers can smuggle delete, index, or update operations into bulk requests executed under the manager's admin...

EUVD-2026-44630

Wazuh Manager before 5.0.0-beta3 fails to escape the DataValue.index field when constructing OpenSearch bulk requests, allowing enrolled agents to inject arbitrary NDJSON operations. Attackers can smuggle delete, index, or update operations into bulk requests executed under the manager's admin...