CVE-2026-75897highCWE-1284

CVE-2026-75897: falha de alta gravidade em OpenSearch Dashboards

Uncontrolled Resource Consumption in Capabilities Route in OpenSearch Dashboards

Publicada em

Seguir esta CVE+ Monitorar Amazon OpenSearch Service+ Monitorar OpenSearch Dashboards

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.7epss 0.7%
Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote attackers to cause a denial of service via a crafted HTTP request.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
AWS · Amazon OpenSearch ServiceOpenSearch · OpenSearch Dashboards
CVEs relacionadas — OpenSearch Dashboards

No mesmo produto, das mais perigosas para as menos.

CVE-2026-18420HIGHRCE via Prototype Pollution in OpenSearch DashboardsEPSS 1.0%CVE-2026-84942MEDIUMStored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch DashboardsEPSS 0.5%CVE-2026-77811MEDIUMStored Cross-Site Scripting via Integration Template Asset in OpenSearch DashboardsEPSS 0.5%