CVE-2026-75897Suited to automated attack · CISA
Uncontrolled Resource Consumption in Capabilities Route in OpenSearch Dashboards
CVSS score
7.5
EPSS probability
%0.7
Risk score
0.1
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.6
CVE-2026-87911
Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server
A
Patch verifiedEPSS %2
7.5
CVE-2026-94450
Potential denial of service when configured to send Retry packets in s2n-quic
A
Patch verifiedEPSS %2
9.0
CVE-2026-104019
OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio
A
Patch verifiedEPSS %1
8.7
CVE-2026-18428
SQL Query Validation Bypass in OpenSearch Direct Query
A
Patch verifiedEPSS %1
8.8
CVE-2026-83497
Unrestricted Java Deserialization in OpenSearch SQL Plugin Cursor Pagination
O
Patch verifiedEPSS %1
9.9
CVE-2026-89049
Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent
A
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-75897"