Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

2 matching records.

1. 26
   CVE NVD 35h ago

   OpenSearch SQL supports querying OpenSearch data using SQL and Piped Processing Language.

   OpenSearch SQL supports querying OpenSearch data using SQL and Piped Processing Language. In the 2.x line from 2.8.0.0 until 2.19.6.0, and the 3.x line prior to 3.7.0.0, a remote authenticated user with basic read/search…

   CVSS 8.7 Fix available CVE-2026-63393 Opensearch-Project Database
2. 8
   CVE NVD 14d ago

   phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery vulnerability in the Elasticsearch and OpenSearch…

   phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery vulnerability in the Elasticsearch and OpenSearch administration API endpoints, which do not validate a CSRF token for the create…

   CVSS 6.5 CVE-2026-111906 Elastic OpenSearch Database

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=OpenSearch&limit=100. RSS for this section: feed.xml.