CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

OpenSearch — security advisories

5 advisorieslatest 2026-08-20⚡ RSS feed

Tracked OpenSearch products:

OpenSearch Dashboards TSVB Plugin OpenSearch Alerting Plugin OpenSearch SQL Plugin OpenSearch Security Analytics Plugin OpenSearch Dashboards

⚡ Watch OpenSearch

Get an email when a new OpenSearch advisory drops — max one per day, one-click unsubscribe.

CVE-2026-18481 - Stored XSS in Participant URL Field leads to Account Takeover via Session Token Theft

unknownCVE-2026-18481aws2026-08-20

CVE-2026-19311- Missing Authorization in OpenSearch Alerting Plugin

unknownCVE-2026-19311aws2026-08-20

CVE-2026-18428 - OpenSearch SQL Plugin - Async Query Validation Bypass

unknownCVE-2026-18428aws2026-08-20

CVE-2026-18952 - Missing Input Validation in OpenSearch Security Analytics Plugin

unknownCVE-2026-18952aws2026-08-20

CVE-2026-18420 - Remote Code Execution via Prototype Pollution in OpenSearch Dashboards TSVB Plugin

unknownCVE-2026-18420aws2026-08-20