1332 matches found
CVE-2026-56699
The Wazuh Manager is vulnerable to NDJSON Injection in the inventory_sync() function within the cluster synchronization component. This occurs because the software fails to escape the DataValue.index field when constructing OpenSearch bulk requests. An attacker operating remotely can leverage thi...
PT-2026-60121
Wazuh Manager before 5.0.0-beta3 fails to escape the DataValue.index field when constructing OpenSearch bulk requests, allowing enrolled agents to inject arbitrary NDJSON operations. Attackers can smuggle delete, index, or update operations into bulk requests executed under the manager's admin...
GHSA-MX76-R943-RF8G vulnerabilities
Vulnerabilities for packages: opensearch...
CVE-2026-8149 vulnerabilities
Vulnerabilities for packages: opensearch...
CVE-2026-8149 vulnerabilities
Vulnerabilities for packages: keycloak-fips, opensearch, geoserver, guacamole-client, wazuh-indexer, bouncycastle-fips...
GHSA-MX76-R943-RF8G vulnerabilities
Vulnerabilities for packages: keycloak-fips, opensearch, geoserver, guacamole-client, wazuh-indexer, bouncycastle-fips...
GHSA-22P9-WV53-3RQ4 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2026-48801 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-RMMH-P597-PPVV vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards, wazuh-dashboard-fips, opensearch-dashboards-fips...
CVE-2024-1899 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards, wazuh-dashboard-fips, opensearch-dashboards-fips...
fastapi-users-db-opensearch (>=0.0.0, <=0.0.4), fastapi-users-db-sqlalchemy (3.0.2) potentially affected by CVE-2025-68481 via fastapi-users (9.3.2)
fastapi-users PYPI version 9.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastapi-users and may be impacted: - fastapi-users-db-opensearch =0.0.0, =0.0.4 - fastapi-users-db-sqlalchemy 3.0.2 Source cves: CVE-2025-68481 Source advisory:...
OpenSearch DoS
The vulnerability of the OpenSearch software package is related to insufficient protection of service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...
OpenSearch Security Plugin Privilege Escalation
The vulnerability of the OpenSearch software security plugin is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
OpenSearch FLS Unauthorized Access
The vulnerability of the FLS module in the OpenSearch software package is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
OpenSearch TLS Certificate Validation
The vulnerability of the TLS certificate validation module in the OpenSearch software package is related to errors in the certificate authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...
OpenSearch DLS Unauthorized Access
The vulnerability of the DLS component in the OpenSearch software package is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
GHSA-G27C-Q7CP-MHX6 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips...
CVE-2026-9673 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips...