Log in Start free

OpenSearch

Products

ProductCVEsExploitedLatest
OpenSearch Dashboards3–Sep 8, 2026
OpenSearch2–Aug 31, 2026
OpenSearch Dashboards dashboards-observability plugin1–Aug 21, 2026

Exploited and recent CVEs

  • CVE-2026-84942 High 8.7 Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards 0.5%
  • CVE-2026-83497 High 8.8 Unrestricted Java Deserialization in OpenSearch SQL Plugin Cursor Pagination 1.0%
  • CVE-2026-77811 High 8.7 Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards 0.5%
  • CVE-2026-18420 High 8.8 RCE via Prototype Pollution in OpenSearch Dashboards 1.0%
  • CVE-2026-75897 High 7.5 Uncontrolled Resource Consumption in Capabilities Route in OpenSearch Dashboards 0.7%
  • CVE-2025-9624 High 8.3 OpenSearch 3.2.0 - Nested Boolean/Disjunction asymmetric DoS 0.7%