1329 matches found
CVE-2026-77811 Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards
Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset wit...
EUVD-2026-64129
Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset wit...
CVE-2026-77811
CVE-2026-77811 is a stored cross-site scripting (XSS) vulnerability in the dashboards-observability plugin of OpenSearch Dashboards . The root cause is improper input validation , which allows a remote authenticated user with write permissions to saved objects to upload a saved asset containing a...
CVE-2026-77811 Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards
Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset wit...
deadair v0.6.0
Open-source SIEM detection health. Find enabled detections that are blind because their telemetry is missing, stale, late, or schema-incompatible. Runs locally · Read-only · No agent · No telemetry upload Read the technical write-up · Featured in Detection Engineering Weekly Real scan of a...
PT-2026-79451
Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset wit...
CVE-2026-77811: Improper Neutralization of Input During Web Page Generation
Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashboards saved objects to execute arbitrary JavaScript in the context of other users' browser sessions by uploading a saved asset wit...
CVE-2026-18420
Improper input validation in the Time Series Visual Builder TSVB plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that enabl...
CVE-2026-18420 RCE via Prototype Pollution in OpenSearch Dashboards
Improper input validation in the Time Series Visual Builder TSVB plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that enabl...
CVE-2026-18420 RCE via Prototype Pollution in OpenSearch Dashboards
Improper input validation in the Time Series Visual Builder TSVB plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that enabl...
CVE-2026-18420 RCE via Prototype Pollution in OpenSearch Dashboards
Improper input validation in the Time Series Visual Builder TSVB plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that enabl...
EUVD-2026-63592
Improper input validation in the Time Series Visual Builder TSVB plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that enabl...
CVE-2026-18420
Improper input validation in OpenSearch Dashboards' TSVB plugin enables prototype pollution via crafted JSON to the metrics visualization API, yielding authenticated remote code execution. CVSS 3.1 scores 8.8 (HIGH). Affected versions are fixed in OpenSearch Dashboards 3.8.0. Exploitation in the ...
CVE-2026-18420
Improper input validation in the Time Series Visual Builder TSVB plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that enabl...
CVE-2026-59711 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips, opensearch-dashboards-fips, opensearch-dashboards...
CVE-2026-59710 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips, opensearch-dashboards-fips, opensearch-dashboards...
GHSA-22G5-R2X5-97CX vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips, opensearch-dashboards-fips, opensearch-dashboards...
GHSA-CR32-G25G-VXJJ vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips, opensearch-dashboards-fips, opensearch-dashboards...
