CVE-2026-18952 | BDVDB-2026-358301 Detail

Description#

Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-08-12Record published in the CVE List.
2. Version 22026-08-21Most recent update recorded in the CVE List.