Boletines de Vulnerabilidades |
CVE-2026-18428 |
|
| Software afectado | APACHE |
| A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-18428 | |