Veille CVE

Mercredi 12 août 2026

2 CVE

Critique 0 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « OpenSearch » ✕
  1. CVE-2026-19311 8.1 Élevée

    AWS OpenSearch · Github OpenSearch

    Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data source and input index parameters.

  2. CVE-2026-18952 8.1 Élevée

    AWS Opensearch · Github Opensearch

    Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint.