Opensearch Opensearch Dashboards
3 CVEs affecting Opensearch Opensearch Dashboards. Latest disclosed: 2026-09-08. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-18420 | High | 8.8 | 2026-08-20 | Improper input validation in the Time Series Visual Builder (TSVB) plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary cod… |
CVE-2026-84942 | High | 8.7 | 2026-09-08 | Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write perm… |
CVE-2026-75897 | High | 7.5 | 2026-08-18 | Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote atta… |