Baitaphish
Security intelligence
SearchLatest briefing
Source

AWS Security Bulletins

Security bulletin source identity maintained by Amazon Web Services.

Source ID: aws_security_bulletins

151 item(s)
← Back to all sources
Publisher
Amazon Web Services
Source family
vendor_advisories
Publication state
PUBLIC_NOINDEX
Visit the canonical publisher page

Baitaphish provides this source identity and attribution. Publisher full text is not republished here.

Published 2026-10-26T16:50:46Z
CVE-2026-115418 - SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS)
7d865b881884…
Source →Open →
Published 2026-10-25T03:13:38Z
CVE-2026-18061 - XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin
caa70077f6f9…
Source →Open →
Published 2026-10-25T03:13:38Z
CVE-2026-85228 - Integer overflow in tensor buffer validation in Deep Java Library
748a42a70eca…
Source →Open →
Published 2026-10-25T03:13:38Z
CVE-2026-89090 - Denial of service in the event stream header decoder in AWS SDK for Go v2
6a0d0961aea9…
Source →Open →
Published 2026-10-25T03:13:38Z
CVE-2026-89065 and CVE-2026-89066: Issue with projen - Path traversal and OS command injection
620b291e0c95…
Source →Open →
Published 2026-10-25T03:13:38Z
CVE-2026-89049 - Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent
41c7df7bffb3…
Source →Open →
Published 2026-10-25T03:11:39Z
CVE-2026-84942 - Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards
d968a7e60abe…
Source →Open →
Published 2026-10-25T03:11:39Z
CVE-2026-87912 and CVE-2026-87913: Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops and MCP Server
c809cd46f48c…
Source →Open →
Published 2026-10-25T03:11:39Z
CVE-2026-87911
9d89458f235b…
Source →Open →
Published 2026-10-25T03:11:39Z
CVE-2026-85788 - Issue with awslabs mysql-mcp-server
435acd2eb45f…
Source →Open →
Published 2026-10-25T03:11:39Z
CVE-2026-85787 - An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server to modify data beyond the read-only scope
2906ccac07d3…
Source →Open →
Published 2026-10-25T03:07:57Z
CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles
93fd69a0e880…
Source →Open →
Published 2026-10-23T19:09:22Z
CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server
ebc89964e953…
Source →Open →
Published 2026-10-23T17:45:37Z
CVE-2026-115812 and CVE-2026-115813: Issue in Amazon Web Services Multi Model Server
1a3e5d2a8ad4…
Source →Open →
Published 2026-10-22T20:40:51Z
CVE-2026-115417 - Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt
d2ed338d9d36…
Source →Open →
Published 2026-10-22T20:07:11Z
CVE-2026-115419 - Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server
39f1b4404e7f…
Source →Open →
Published 2026-10-22T18:50:58Z
CVE-2026-115414 - OS Command Injection Issue in SAM CLI Terraform Hook
6da231f7086f…
Source →Open →
Published 2026-10-22T16:58:02Z
CVE-2026-115416 - Incorrect authorization checks in Amazon Athena engine version 3 query processing
97da6e6577db…
Source →Open →
Published 2026-10-21T21:41:06Z
CVE-2026-85786 - Incomplete fix for CVE-2026-75936 memory-amplification denial of service in Amazon ion-java
f127ef3abc5b…
Source →Open →
Published 2026-10-21T21:41:06Z
CVE-2026-85781 - Unverified access point ownership in Amazon EFS CSI Driver
cb3f3524737b…
Source →Open →
Published 2026-10-21T21:41:06Z
CVE-2026-85654 - Code injection in the CDK generator in Amazon awslabs.dynamodb-mcp-server
adc796320b63…
Source →Open →
Published 2026-10-21T21:41:06Z
CVE-2026-85028: Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit
5881a1d29252…
Source →Open →
Published 2026-10-21T21:41:06Z
CVE-2026-85656 - OS command injection in Amazon log4j-cve-2021-44228-hotpatch
156c6239387c…
Source →Open →
Published 2026-10-21T21:37:41Z
CVE-2026-83551 - Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK
b46d7d82592a…
Source →Open →
Published 2026-10-21T21:37:41Z
CVE-2026-83497 - OpenSearch SQL Plugin - Unrestricted Java Deserialization in Cursor Pagination
a2f7afe349c3…
Source →Open →
Published 2026-10-21T21:37:41Z
CVE-2026-85012 - OS command injection in the Amazon CodeCatalyst blueprints SDK
6f970edb765c…
Source →Open →
Published 2026-10-21T21:37:41Z
CVE-2026-84851- Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6
452b2893ed15…
Source →Open →
Published 2026-10-21T21:37:40Z
CVE-2026-81849 - Path traversal in the aws:downloadContent plugin in amazon-ssm-agent
14a444a4defd…
Source →Open →
Published 2026-10-21T21:34:50Z
PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)
0f720091ce52…
Source →Open →
Published 2026-10-21T21:32:10Z
CVE-2026-112408 - Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()
099889d37357…
Source →Open →
Published 2026-10-21T19:54:11Z
CVE-2026-77811 - Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards
cef91f9d423e…
Source →Open →
Published 2026-10-21T19:54:11Z
CVE-2026-77810 - Issue with Athena Federated Query Neptune Connector
a38bfa46c758…
Source →Open →
Published 2026-10-21T19:54:11Z
CVE-2026-78379 - Consent bypass in Strands Agents Tools python_repl tool
8d3695ae2f63…
Source →Open →
Published 2026-10-21T19:54:11Z
Issue with FreeRTOS-Kernel - CVE-2026-77234, CVE-2026-77235, CVE-2026-77236, CVE-2026-77237
5a0301b88488…
Source →Open →
Published 2026-10-21T19:54:11Z
CVE-2026-81838 - Zip Slip path traversal in awsdac (diagram-as-code)
0e2da9d8f0d5…
Source →Open →
Published 2026-10-21T19:53:57Z
CVE-2026-19642 & CVE-2026-19643 - Memory-safety issues in the Base64 decoder in the AWS SDK for C++
cdcbfeab8293…
Source →Open →
Published 2026-10-21T19:53:57Z
CVE-2026-18420 - Remote Code Execution via Prototype Pollution in OpenSearch Dashboards TSVB Plugin
96e0aacf66ac…
Source →Open →
Published 2026-10-21T19:53:57Z
CVE-2026-75935 and CVE-2026-75936 - Issue with Amazon ion-java - Memory-amplification denial of service
7d91eb17e78a…
Source →Open →
Published 2026-10-21T19:53:57Z
CVE-2026-75910 - Issue with Athena Federated Query Clickhouse Connector
7d27f1d27128…
Source →Open →
Published 2026-10-21T19:53:57Z
CVE-2026-18428 - OpenSearch SQL Plugin - Async Query Validation Bypass
4ba0e8e6918d…
Source →Open →
Published 2026-10-21T19:53:57Z
CVE-2026-75897 - Uncontrolled resource consumption in OpenSearch Dashboards capabilities route
09938b949d80…
Source →Open →
Published 2026-10-21T19:53:56Z
CVE-2026-18954 - Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server
ffc47253e838…
Source →Open →
Published 2026-10-21T19:53:56Z
CVE-2026-19111 - Insecure direct object reference in Strands Agents Tools memory tools
f734b122e75a…
Source →Open →
Published 2026-10-21T19:53:56Z
CVE-2026-18830 - Issue with Amazon Bedrock AgentCore harness – Insufficient Input Validation
d735407de187…
Source →Open →
Published 2026-10-21T19:53:56Z
CVE-2026-18654 - Disabled SSH host key verification in AWS CLI EMR helper commands
b24d11714026…
Source →Open →
Published 2026-10-21T19:53:56Z
CVE-2026-19311- Missing Authorization in OpenSearch Alerting Plugin
acd9d9cb9511…
Source →Open →
Published 2026-10-21T19:53:56Z
CVE-2026-18733 - Prompt injection bypasses shell tool consent gate in Strands Agents Tools
a9e567736741…
Source →Open →
Published 2026-10-21T19:53:56Z
CVE-2026-18952 - Missing Input Validation in OpenSearch Security Analytics Plugin
9b35e6ffe326…
Source →Open →
Published 2026-10-21T19:53:56Z
CVE-2026-18656 & CVE-2026-18657 - Issue with Kiro IDE and CLI - Executable Resolution from Untrusted Project Directory on Windows
54166e0964c1…
Source →Open →
Published 2026-10-21T19:53:56Z
CVE-2026-18953 - Improper limitation of a pathname in AWS Transform MCP Server
06f7f0462e83…
Source →Open →
Published 2026-10-20T20:39:30Z
CVE-2026-112407 - Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications
400ebd7092e4…
Source →Open →
Published 2026-10-20T20:19:42Z
CVE-2026-112380 - Missing authorization in the WhatsApp channel in Kiro Crew
b647cdeb8b46…
Source →Open →
Published 2026-10-19T18:13:44Z
CVE-2026-18394 - Incorrect authorization in Strands Agents Tools http_request tool
61671c9aac48…
Source →Open →
Published 2026-10-19T18:13:43Z
CVE-2026-16584 - AWS API MCP Server Security Policy Bypass via Startup Failure
fb7791a7c14e…
Source →Open →
Published 2026-10-19T18:13:43Z
CVE-2026-16796 - Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()
bd2d052cdc5d…
Source →Open →
Published 2026-10-19T18:13:43Z
Incomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-react
9f0c144c2dd5…
Source →Open →
Published 2026-10-19T18:13:43Z
CVE-2026-15415 - Path traversal and arbitrary file write in the workflow linters of aws-healthomics-mcp-server
9862c9a2f36c…
Source →Open →
Published 2026-10-19T18:13:43Z
CVE-2026-18140 - Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers
909912d5e468…
Source →Open →
Published 2026-10-19T18:13:43Z
CVE-2026-15746 - Credential disclosure in Strands Agents Tools elasticsearch_memory tool
84c2885b48c2…
Source →Open →
Published 2026-10-19T18:13:43Z
CVE-2026-12283 - Issue with Athena Federated Query Synapse Connector
7cd2f8576053…
Source →Open →
Published 2026-10-19T18:13:43Z
CVE-2026-15737 - Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDK
4872613c1c75…
Source →Open →
Published 2026-10-19T18:13:43Z
CVE-2026-16756 - Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service
437deb572916…
Source →Open →
Published 2026-10-19T18:13:43Z
CVE-2026-15895: OS command injection in jsii-diff in AWS jsii
2145282344d5…
Source →Open →
Published 2026-10-19T18:13:43Z
CVE-2026-16317 and CVE-2026-16318: Issues with s2n-tls: an open-source implementation of the TLS/SSL protocols
05211db46b6d…
Source →Open →
Published 2026-10-19T18:13:27Z
CVE-2026-15643 - AWS HealthLake MCP Server SSRF via Unvalidated Pagination URL
e3fabffaaedf…
Source →Open →
Published 2026-10-19T18:13:26Z
Issue with containerd CRI Plugin - CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47262
f6b44a85a3a6…
Source →Open →
Published 2026-10-19T18:13:26Z
CVE-2026-14471 - Authenticated SQL injection in the metrics-service retention policy subsystem of mcp-gateway-registry
daea5ab7285a…
Source →Open →
Published 2026-10-19T18:13:26Z
CVE-2026-11931 - Insecure Permissions on Authentication Token Cache File in Kiro IDE
d39a7fb2ef13…
Source →Open →
Published 2026-10-19T18:13:26Z
CVE-2026-13760 - OS Command Injection in NodejsFunction Docker Bundling in aws-cdk-lib
8741d91c1050…
Source →Open →
Published 2026-10-19T18:13:26Z
CVE-2026-13762 and CVE-2026-13763 - Issue with HTTP/2 multi-frame request body inspection in AWS WAF
79ab97da000c…
Source →Open →
Published 2026-10-19T18:13:26Z
CVE-2026-13769 – Insecure file permissions in AWS CLI
7671aa0f547a…
Source →Open →
Published 2026-10-19T18:13:26Z
CVE-2026-12957 and CVE-2026-12958 - Issues in Language Servers for AWS and Amazon Q Developer Plugins
75ab7f449a41…
Source →Open →
Published 2026-10-19T18:13:26Z
CVE-2026-10740 - Excessive memory allocation in s2n-quic
4bba1e34ab9c…
Source →Open →
Published 2026-10-19T18:13:26Z
CVE-2026-12043 - Heap double-free in AWS Common Runtime aws-c-http
37e0b7df31e5…
Source →Open →
Published 2026-10-19T18:13:26Z
CVE-2026-14265- Deserialization of Untrusted Data in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin
331468d003f9…
Source →Open →
Published 2026-10-19T18:13:10Z
CVE-2026-10591 - Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths
e516f183c474…
Source →Open →
Published 2026-10-19T18:13:10Z
Dirty Frag and other issues in Amazon Linux kernels
c553d66f2e9e…
Source →Open →
Published 2026-10-19T18:13:10Z
Fragnesia Local Privilege Escalation report via ESP-in-TCP in the Linux Kernel
c3b237b7f89d…
Source →Open →
Published 2026-10-19T18:13:10Z
CVE-2026-31431
bb961e079982…
Source →Open →
Published 2026-10-19T18:13:10Z
CVE-2026-8178 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver
982a164c7bd7…
Source →Open →
Published 2026-10-19T18:13:10Z
CVE-2026-9255 - Tool Execution Without Authorization via Piped Stdin in Kiro CLI
79322c48474f…
Source →Open →
Published 2026-10-19T18:13:10Z
Ongoing updates on Copy.fail and variants
2b47d6d1ef1c…
Source →Open →
Published 2026-10-19T18:13:10Z
CVE-2026-11400 and CVE-2026-11401
25059116d7e4…
Source →Open →
Published 2026-10-19T18:13:10Z
CVE-2026-8686 - Heap out-of-bounds read in coreMQTT MQTT5 property parsing
24cb222a3393…
Source →Open →
Published 2026-10-19T18:13:10Z
CVE-2026-8838 - Remote Code Execution in amazon-redshift-python-driver
1fd117d49dee…
Source →Open →
Published 2026-10-19T18:13:10Z
Issue with Amazon SageMaker Python SDK - Model artifact integrity verification issues (CVE-2026-8596 & CVE-2026-8597)
0ba4357947bd…
Source →Open →
Published 2026-10-19T18:12:56Z
CVE-2026-7461 - OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials
dd440c926a78…
Source →Open →
Published 2026-10-19T18:12:55Z
Issues with AWS Research and Engineering Studio (RES)
fb19190cc1b1…
Source →Open →
Published 2026-10-19T18:12:55Z
Issue with FreeRTOS-Plus-TCP - MAC Address Validation Bypass and ICMP Echo Reply Integer Underflow
ee36c7e09a80…
Source →Open →
Published 2026-10-19T18:12:55Z
CVE-2026-5190 - AWS C Event Stream Streaming Decoder Stack Buffer Overflow
dd07367dde48…
Source →Open →
Published 2026-10-19T18:12:55Z
Issue with AWS Ops Wheel (CVE-2026-6911 and CVE-2026-6912
a60f75db27a8…
Source →Open →
Published 2026-10-19T18:12:55Z
CVE-2026-7191- Arbitrary Code Execution via Sandbox Bypass in QnABot on AWS
875c6264b0cd…
Source →Open →
Published 2026-10-19T18:12:55Z
CVE-2026-7424 - Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP
62f0af1c4fc6…
Source →Open →
Published 2026-10-19T18:12:55Z
Issues with Amazon Athena ODBC Driver
49b34cbfcdb7…
Source →Open →
Published 2026-10-19T18:12:55Z
CVE-2026-6437 - Mount Option Injection in Amazon EFS CSI Driver
2192aebc3f05…
Source →Open →
Published 2026-10-19T18:12:55Z
CVE-2026-5747 - Out-of-bounds Write in Firecracker virtio-pci Transport
015d9161615f…
Source →Open →
Published 2026-10-16T17:34:49Z
CVE-2026-102551 & CVE-2026-102552 - Issue with FreeRTOS-Plus-TCP
6b255564a9d1…
Source →Open →
Published 2026-10-16T17:34:49Z
CVE-2026-109587 & CVE-2026-109588 - Issue with FreeRTOS-Kernel
1db3d218ac5b…
Source →Open →
Published 2026-10-15T19:03:20Z
Issue in the Linux kernel virtio-net/TAP networking path affecting KVM-based hypervisors
de66877a8ec1…
Source →Open →
Published 2026-10-15T16:41:28Z
CVE-2026-110812 - Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune
24f06b652927…
Source →Open →
Published 2026-10-14T19:48:49Z
CVE-2026-110310 - RSA PKCS#1 v1.5 padding oracle via legacy envelope key format downgrade in Amazon S3 Encryption Client for .NET
fb50ef66d161…
Source →Open →
Published 2026-10-14T18:38:55Z
CVE-2026-110248 - Insertion of sensitive information into log files in Amazon SageMaker Python SDK
bc78bb6705a8…
Source →Open →
Published 2026-10-14T18:38:44Z
CVE-2026-15957 - Uncontrolled recursion in smithy-rs generated JSON, CBOR, and XML deserializers allows unauthenticated remote denial of service via recursive shapes
d11fd8e2495f…
Source →Open →
Published 2026-10-14T18:38:31Z
CVE-2026-14904 - Improper Link Resolution in Auth.GetUserPrivateKey in AWS Research and Engineering Studio
28bbe3f7ab0b…
Source →Open →
Published 2026-10-14T18:38:30Z
CVE-2026-10740 - Excessive memory allocation in s2n-quic
e38c84e2360c…
Source →Open →
Published 2026-10-14T18:38:30Z
CVE-2026-12530 - Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()
50ce914e270a…
Source →Open →
Published 2026-10-14T18:37:57Z
CVE-2026-7791 - Local Privilege Escalation via TOCTOU Race Condition in Amazon WorkSpaces Skylight Agent
ac3e68fa655f…
Source →Open →
Published 2026-10-14T18:37:57Z
CVE-2026-6550 - Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python
6217d778654b…
Source →Open →
Published 2026-10-14T18:37:57Z
Issue with FreeRTOS-Plus-TCP - IPv6 Router Advertisement Memory Safety Issues
6120f2eaa8bc…
Source →Open →
Published 2026-10-14T18:37:56Z
CVE-2026-5429 - Kiro IDE Webview Cross-Site Scripting via Workspace Color Theme
cb3771cf832e…
Source →Open →
Published 2026-10-09T18:13:24Z
CVE-2026-108096: Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category
e61c76b349b1…
Source →Open →
Published 2026-10-09T15:56:44Z
CVE-2026-107783 - Insertion of sensitive information into log file in AWS Tools for PowerShell
091786eb1e65…
Source →Open →
Published 2026-10-08T19:44:26Z
CVE-2026-107608: Improper link resolution in asset bundling output handling in aws-cdk-lib
ad5f44432b34…
Source →Open →
Published 2026-10-08T19:29:19Z
CVE-2026-107322 - OS command injection in Amazon Agent Plugins for AWS databases-on-aws
7b2fbfb42940…
Source →Open →
Published 2026-10-08T17:43:09Z
CVE-2026-107332 - Insecure default file permissions on cached credentials in AWS Toolkit for Visual Studio Code
0a930818b7de…
Source →Open →
Published 2026-10-07T20:19:18Z
CVE-2026-107352 - Missing authorization checks in Amazon Athena engine version 3 request handling
bdd4ba231abe…
Source →Open →
Published 2026-10-07T18:25:26Z
CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS
1f8f37ef6b08…
Source →Open →
Published 2026-10-06T20:41:24Z
CVE-2026-105812 and CVE-2026-106032: Issue with Bedrock AgentCore Starter Toolkit - Import Agent Code Injection and SSRF
0d12d9da9901…
Source →Open →
Published 2026-10-02T20:25:48Z
CVE-2026-104019 - OS command injection in the Studio Space startup script in Amazon SageMaker Distribution
7cb6d3691029…
Source →Open →
Published 2026-10-02T19:21:29Z
CVE-2026-103956, CVE-2026-103957, and CVE-2026-103958 - Issues in Loom for AWS
d74ef45ced82…
Source →Open →
Published 2026-10-02T16:38:11Z
CVE-2026-103505 - Mount Option Injection in Amazon EFS CSI Driver
8867bf736489…
Source →Open →
Published 2026-10-01T21:15:48Z
CVE-2026-104002: Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)
5766f021291c…
Source →Open →
Published 2026-10-01T20:50:19Z
CVE-2026-104020 - Uncontrolled recursion in the Ion reader in Amazon Ion Python
40657440781e…
Source →Open →
Published 2026-10-01T18:16:35Z
CVE-2026-97662 - Argument injection in AWS security-agent-mcp-server diff scan
fba8eeb2a974…
Source →Open →
Published 2026-09-29T15:17:30Z
CVE-2026-100308 - GluonTS arbitrary command execution during model deserialization
8e9c5ef28183…
Source →Open →
Published 2026-09-24T19:17:16Z
CVE-2026-96883 - Type confusion in AWS pgcollection allows remote code execution
83872b9bd672…
Source →Open →
Published 2026-09-24T17:21:34Z
CVE-2026-95985 - Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces
3339aa7b467a…
Source →Open →
Published 2026-09-22T20:08:17Z
CVE-2026-94450 - Potential denial of service when configured to send Retry packets in s2n-quic
33c052f1a0be…
Source →Open →
Published 2026-09-22T19:49:30Z
CVE-2026-9291 - Insecure Deserialization in Amazon Braket SDK Job Results Processing
798a8eb492fb…
Source →Open →
Published 2026-09-22T19:49:30Z
CVE-2026-9133 - Arbitrary file read in rabbitmq-aws plugin
4d3c92565ea7…
Source →Open →
Published 2026-09-22T19:49:28Z
CVE-2026-11393 - Code Injection via Improper Triple-Quote Escaping in AgentCore CLI Bedrock Agent Import
6a954f339427…
Source →Open →
Published 2026-09-22T19:49:28Z
CVE-2026-10584 - HTTPS Fallback to HTTP in Graph Explorer
263415012b61…
Source →Open →
Published 2026-09-22T19:49:08Z
CVE-2026-15738 - Issue with AWS Load Balancer Controller Cross-Namespace Traffic Interception via HTTPRoute/GRPCRoute Priority Ordering
858a3625d8c3…
Source →Open →
Published 2026-09-22T19:48:45Z
CVE-2026-18481 - Stored XSS in Participant URL Field leads to Account Takeover via Session Token Theft
ef375097ba3a…
Source →Open →
Published 2026-09-22T19:48:45Z
CVE-2026-18655 - Broker Credential and OAuth Token Disclosure in AWS Labs Amazon MQ MCP Server via Prompt Injection
d945f95094c0…
Source →Open →
Published 2026-09-22T17:10:17Z
CVE-2026-94384 - Missing Authorization in AmazonConnectSalesforceLambda sfExecuteAWSService
48ce0a18d939…
Source →Open →
Published 2026-09-17T19:18:01Z
CVE-2026-92943 - Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python
037d4c58cea2…
Source →Open →
Published 2026-09-16T20:16:23Z
CVE-2026-86831: Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS
691fece268dc…
Source →Open →
Published 2026-09-14T18:04:59Z
CVE-2026-86830 - Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center
68ca1215efee…
Source →Open →
Published 2026-09-11T19:08:25Z
CVE-2026-89332 - Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration
752046b14288…
Source →Open →
Published 2026-08-20T21:35:57Z
CVE-2026-4269 - Improper S3 ownership verification in Bedrock AgentCore Starter Toolkit
c68cb62337af…
Source →Open →
Published 2026-08-20T21:35:57Z
CVE-2026-1386 - Arbitrary Host File Overwrite via Symlink in Firecracker Jailer
adff80387206…
Source →Open →
Published 2026-08-20T21:35:57Z
CVE-2026-4428: Issues with AWS-LC - CRL Distribution Point Scope Check Logic Error
90f4dac47205…
Source →Open →
Published 2026-08-20T21:35:57Z
Issue with AWS-LC: an open-source, general-purpose cryptographic library (CVE-2026-3336, CVE-2026-3337, CVE-2026-3338)
8f97f1357bfa…
Source →Open →
Published 2026-08-20T21:35:57Z
Security Findings in SageMaker Python SDK
8174e0f57ecd…
Source →Open →
Published 2026-08-20T21:35:57Z
CVE-2026-4270 - AWS API MCP File Access Restriction Bypass
7fc5a2c232f5…
Source →Open →
Published 2026-08-20T21:35:57Z
CVE-2026-0830 - Command Injection in Kiro GitLab Merge Request Helper
5528f17a27fd…
Source →Open →
Published 2026-08-20T21:35:57Z
Issues in tough library and tuftool CLI utility
5328207d073e…
Source →Open →
Published 2026-08-20T21:35:57Z
Unanchored ACCOUNT_ID webhook filters for CodeBuild
385f344400a5…
Source →Open →
Published 2026-08-20T21:35:57Z
MariaDB Server Audit Plugin Comment Handling Bypass
352379c7c004…
Source →Open →
Published 2026-08-20T21:35:57Z
Arbitrary code execution via crafted project files in Kiro IDE
1c8934b46f38…
Source →Open →