CVE-2026-59710 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-22G5-R2X5-97CX vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-RCVQ-M9J9-6F4G vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-RMMH-P597-PPVV vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-VHJM-W67Q-G75C vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2024-1899 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-59711 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-X426-X7CC-3FPC vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-44979 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-48049 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-CR32-G25G-VXJJ vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-18420: Improperly Controlled Modification of Object Prototype Attributes

Improper input validation in the Time Series Visual Builder TSVB plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that enabl...

From Noise to Signal: Improving Security Log Anomaly Detection Using LLMs with Endpoint-Specific Logs

Existing approaches to anomalous behaviour log detection, such as Wazuh rely primarily on predefined detection rules, while statistical anomaly detection approaches such as OpenSearch identify deviations from previously observed behavioural patterns. Recent research has investigated LLMs for log...

PT-2026-79120

Name of the Vulnerable Software and Affected Versions OpenSearch Dashboards versions prior to 3.8 Description Improper input validation in the Time Series Visual Builder TSVB plugin allows an authenticated remote user to execute arbitrary code on the server. This is achieved by sending a crafted...

Missing Authorization

Overview phpmyfaq/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Missing Authorization via the admin API endpoints for LDAP, Elasticsearch, OpenSearch, and dashboard configuration. An attacker can access sensitive...

CVE-2026-76211 phpMyFAQ before 4.1.7 Information Disclosure via Admin API

phpMyFAQ before 4.1.7 fails to properly enforce CONFIGURATIONEDIT permission on admin API read endpoints for LDAP, Elasticsearch, OpenSearch, and dashboard configuration, allowing any authenticated user to access sensitive administrative data. Attackers can retrieve LDAP server topology, bind...

CVE-2026-76211

phpMyFAQ before 4.1.7 contains an authorization flaw in its admin API. The CONFIGURATION_EDIT permission is not properly enforced on read endpoints for LDAP , Elasticsearch , OpenSearch , and dashboard configuration. Any authenticated user with a valid session can call these endpoints and retriev...

EUVD-2026-62452

phpMyFAQ before 4.1.7 fails to properly enforce CONFIGURATIONEDIT permission on admin API read endpoints for LDAP, Elasticsearch, OpenSearch, and dashboard configuration, allowing any authenticated user to access sensitive administrative data. Attackers can retrieve LDAP server topology, bind...

CVE-2026-76211: Missing Authorization

phpMyFAQ before 4.1.7 fails to properly enforce CONFIGURATIONEDIT permission on admin API read endpoints for LDAP, Elasticsearch, OpenSearch, and dashboard configuration, allowing any authenticated user to access sensitive administrative data. Attackers can retrieve LDAP server topology, bind...

PT-2026-78393

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.1.7 Description Insufficient enforcement of the CONFIGURATION EDIT permission on administrative API read endpoints allows any authenticated user to access sensitive administrative data. By utilizing a valid session...