1239 matches found
PT-2026-60121
Wazuh Manager before 5.0.0-beta3 fails to escape the DataValue.index field when constructing OpenSearch bulk requests, allowing enrolled agents to inject arbitrary NDJSON operations. Attackers can smuggle delete, index, or update operations into bulk requests executed under the manager's admin...
GHSA-MX76-R943-RF8G vulnerabilities
Vulnerabilities for packages: opensearch...
CVE-2026-8149 vulnerabilities
Vulnerabilities for packages: opensearch...
GHSA-MX76-R943-RF8G vulnerabilities
Vulnerabilities for packages: opensearch, bouncycastle-fips, wazuh-indexer, geoserver, keycloak-fips, guacamole-client...
CVE-2026-8149 vulnerabilities
Vulnerabilities for packages: opensearch, bouncycastle-fips, wazuh-indexer, geoserver, keycloak-fips, guacamole-client...
GHSA-22P9-WV53-3RQ4 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2026-48801 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-RMMH-P597-PPVV vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips, opensearch-dashboards, opensearch-dashboards-fips...
CVE-2024-1899 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips, opensearch-dashboards, opensearch-dashboards-fips...
The vulnerability of the security plugin of the OpenSearch software package, which allows a hacker to increase their privileges
The vulnerability of the OpenSearch software security plugin is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of the FLS module in the OpenSearch software package allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the FLS module in the OpenSearch software package is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the OpenSearch software package, related to insufficient protection of service data, allows a hacker to trigger a service failure.
The vulnerability of the OpenSearch software package is related to insufficient protection of service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of the TLS certificate validation module in the OpenSearch software package allows a hacker to circumvent existing security restrictions.
The vulnerability of the TLS certificate validation module in the OpenSearch software package is related to errors in the certificate authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...
The vulnerability of the DLS component in the OpenSearch software package allows a intruder to gain unauthorized access to protected information.
The vulnerability of the DLS component in the OpenSearch software package is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2026-9673 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips...
GHSA-G27C-Q7CP-MHX6 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips...
CVE-2026-9673 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-G27C-Q7CP-MHX6 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2026-45249 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, opensearch-dashboards-fips, kubeflow-katib, commercial-gitlab-rails-ee-fips, opensearch-dashboards, commercial-gitlab-rails-ee...