CVE-2026-63393 - OpenSearch SQL plugin: Unsafe cursor deserialization permits server code execution
CVE ID :CVE-2026-63393 Published : Oct. 30, 2026, 11:17 p.m. | 44 minutes ago Description :OpenSearch SQL supports querying OpenSearch data using SQL and Piped Processing Language. In the 2.x line from 2.8.0.0 until 2.19.6.0, and the 3.x line prior to 3.7.0.0, a remote authenticated user with...