PT-2026-71211 · Amazon · Opensearch Alerting Plugin
CVE-2026-19311
·
Published
2026-08-12
·
Updated
2026-08-12
CVSS v4.0
8.6
High
| Vector | AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Amazon OpenSearch Alerting plugin (affected versions not specified)
Description
Missing authorization in the Execute Monitor API allows an authenticated remote user to read, modify, or delete arbitrary index data. This is achieved by sending a crafted inline monitor request using unintentional data source and input index parameters.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Opensearch Alerting Plugin