Skip to content

CVE record · 1 source

CVE-2026-63393

CVSS 8.7

OpenSearch SQL supports querying OpenSearch data using SQL and Piped Processing Language.

Vendor: Opensearch-Project
Product: sql
CVSS v4.0: 8.7 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness: CWE-502
Exposure class: Database

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

26

CVE NVD 37h ago

OpenSearch SQL supports querying OpenSearch data using SQL and Piped Processing Language.

OpenSearch SQL supports querying OpenSearch data using SQL and Piped Processing Language. In the 2.x line from 2.8.0.0 until 2.19.6.0, and the 3.x line prior to 3.7.0.0, a remote authenticated user with basic read/search…

CVSS 8.7 Fix available CVE-2026-63393 Opensearch-Project