1239 matches found
CVE-2026-18952
Technical details are not publicly available in the provided documents. Monitor for updates from NVD and CVE records.
CVE-2026-18952 Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin
Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...
CVE-2026-18952 Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin
Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...
CVE-2026-19311 Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin
Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...
CVE-2026-19311
Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...
EUVD-2026-57420
Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...
CVE-2026-19311 Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin
Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...
CVE-2026-19311
The CVE-2026-19311 issue affects the Amazon OpenSearch Alerting plugin, specifically the Execute Monitor API. A missing authorization check in the API could allow an authenticated remote user to read, modify, or delete arbitrary index data through a crafted inline monitor request using unintentio...
CVE-2026-19311: Undefined Behavior for Input to API
Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...
PT-2026-71211
Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...
PT-2026-71210
Name of the Vulnerable Software and Affected Versions OpenSearch Security Analytics plugin affected versions not specified Description Missing input validation in the threat intelligence feed parser allows an authenticated remote user to perform server-side request forgery SSRF—a technique where ...
Plaintext Recovery against Post-Filtering Access Control
Fine-grained access control FGAC mechanisms such as row-level security RLS and document-level security DLS are widely deployed in databases to restrict access to data stored in physical indexing structures shared by multiple users e.g., in multi-tenant databases, or in the implementation of...
CVE-2026-18952: Server-Side Request Forgery (SSRF)
Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...
GHSA-38GX-CFQF-F652 vulnerabilities
Vulnerabilities for packages: nextcloud-server, opensearch-dashboards, lerna, kubeflow-centraldashboard, kibana, librechat, wazuh-dashboard-fips, langfuse-fips, prism, opensearch-dashboards-fips, wazuh-dashboard, awx, langfuse, redisinsight, semaphore, jitsucom-jitsu...
CVE-2026-67314 vulnerabilities
Vulnerabilities for packages: nextcloud-server, gitlab-rails-ce, opensearch-dashboards, lerna, kubeflow-centraldashboard, kibana, gitlab-rails-ce-fips, librechat, wazuh-dashboard-fips, langfuse-fips, prism, opensearch-dashboards-fips, wazuh-dashboard, awx, langfuse, redisinsight, semaphore,...
GHSA-38GX-CFQF-F652 vulnerabilities
Vulnerabilities for packages: langfuse, lerna, kubeflow-centraldashboard, opensearch-dashboards, jitsucom-jitsu, nextcloud-server, prism...
CVE-2026-67314 vulnerabilities
Vulnerabilities for packages: langfuse, lerna, kubeflow-centraldashboard, opensearch-dashboards, jitsucom-jitsu, nextcloud-server, prism...
deadair v0.5.1
Open-source SIEM detection health. Find enabled detections that are blind because their telemetry is missing, stale, late, or schema-incompatible. Runs locally · Read-only · No agent · No telemetry upload Read the technical write-up · Featured in Detection Engineering Weekly Real scan of a...