Veille CVE

Jeudi 13 août 2026

1 CVE

  1. CVE-2026-18428 8.8 Élevée

    AWS Opensearch · Github Opensearch

    A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint.