840 matches found
PT-2026-71708
A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint...
CVE-2026-19311
Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...
CVE-2026-18952
Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...
CVE-2026-18952 Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin
Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...
CVE-2026-18952 Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin
Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...
CVE-2026-18952
Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...
EUVD-2026-57422
Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...
CVE-2026-18952
Technical details are not publicly available in the provided documents. Monitor for updates from NVD and CVE records.
CVE-2026-19311 Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin
Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...
CVE-2026-19311 Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin
Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...
CVE-2026-19311
The CVE-2026-19311 issue affects the Amazon OpenSearch Alerting plugin, specifically the Execute Monitor API. A missing authorization check in the API could allow an authenticated remote user to read, modify, or delete arbitrary index data through a crafted inline monitor request using unintentio...
EUVD-2026-57420
Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...
CVE-2026-19311
Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters...
GHSA-38GX-CFQF-F652 vulnerabilities
Vulnerabilities for packages: semaphore, lerna, prism, kubeflow-centraldashboard, langfuse, wazuh-dashboard, jitsucom-jitsu, nextcloud-server, opensearch-dashboards, langfuse-fips, opensearch-dashboards-fips, wazuh-dashboard-fips, librechat, redisinsight, kibana, awx...
CVE-2026-67314 vulnerabilities
Vulnerabilities for packages: semaphore, lerna, prism, kubeflow-centraldashboard, langfuse, wazuh-dashboard, jitsucom-jitsu, nextcloud-server, opensearch-dashboards, langfuse-fips, opensearch-dashboards-fips, wazuh-dashboard-fips, librechat, redisinsight, kibana, awx...
GHSA-38GX-CFQF-F652 vulnerabilities
Vulnerabilities for packages: nextcloud-server, prism, kubeflow-centraldashboard, jitsucom-jitsu, lerna, langfuse, opensearch-dashboards...
CVE-2026-67314 vulnerabilities
Vulnerabilities for packages: nextcloud-server, prism, kubeflow-centraldashboard, jitsucom-jitsu, lerna, langfuse, opensearch-dashboards...
GHSA-22JQ-VG5J-6VGG vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, pulumi, prism, renovate, lerna, sqlpad, langfuse, kubeflow-pipelines, code-server, npm...