Filtered by vendor Amazon
Subscriptions
Filtered by product Amazon Opensearch Service
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-83497 | 3 Amazon, Aws, Opensearch | 3 Amazon Opensearch Service, Amazon Opensearch Service, Opensearch | 2026-08-31 | 8.8 High |
| Unrestricted deserialization of untrusted data in the cursor pagination component in the OpenSearch SQL plugin allows a remote authenticated user with basic read/search permissions to execute arbitrary code on the server by sending a crafted cursor parameter to the plugins/sql endpoint. | ||||
Page 1 of 1.