Read the docs

quickwit-oss

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

quickwit-oss records in CISA KEV

No quickwit-oss vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-62487 CVE-2026-92719 · GHSA-rx45-hj8g-x4vm

Quickwit through 0.9.0 SSRF via SQS queue_url Parameter

Priority HIGH 77

Quickwit through 0.9.0 fails to validate the host and scheme of the queue_url parameter in SQS file sources, allowing attackers to make the node issue requests to arbitrary internal addresses.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00482 Published 2026-09-16 No fix listed CWE-918
Open these records in search →