Skip to contentAws vulnerabilities
Newest
- aws mcp gateway & registryAuthenticated SQL injection in the metrics-service retention policy subsystem of mcp-gateway-registryCVE-2026-144718.6 High
- amazon advanced jdbc wrapperRCE via Deserialization in AWS Advanced JDBC WrapperCVE-2026-142657.7 High
- aws cdkOS Command Injection in aws-cdk-lib Docker BundlingCVE-2026-13760Fix available7.0 High
- aws cli, amazon aws command line interface +1 moreOverly permissive File Permissions in AWS CLICVE-2026-13769Fix available6.8 Medium
- amazon application load balancerHTTP/2 Stream Parser Confusion Body-Inspection Bypass in AWS Application Load Balancer with AWS WAFCVE-2026-137637.9 High
- amazon cloudfront, aws amazon cloudfront +1 moreHTTP/2 Stream Parser Confusion Body-Inspection Bypass in Amazon CloudFront with AWS WAFCVE-2026-137627.9 High
- aws bedrock-agentcoreImproper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages()CVE-2026-12530Fix available8.4 High
- aws kiro ideInsecure Permissions on Authentication Token Cache File in Kiro IDECVE-2026-119316.8 Medium
- aws aws-c-httpHeap double-free in AWS Common Runtime aws-c-httpCVE-2026-120438.7 High
- aws s2n-quicExcessive memory allocation in s2n-quicCVE-2026-10740Fix available6.9 Medium
- aws cloud development kit libraryOS Command Injection in NodejsFunction Bundling in aws-cdk-libCVE-2026-11417Public exploitFix available7.0 High
- aws agentcore cliCode injection via improper triple-quote escaping in AgentCore CLI Bedrock Agent importCVE-2026-11393Fix available8.8 High
- aws advanced go wrapperPrivilege Escalation in AWS Advanced Go Wrapper for Amazon Aurora PostgreSQLCVE-2026-11401Fix available8.6 High
- aws advanced jdbc wrapperPrivilege Escalation in AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQLCVE-2026-11400Fix available8.6 High
- aws graph explorerHTTPS Fallback to HTTP in Graph ExplorerCVE-2026-105848.2 High
- amazon kiro ideKiro IDE Insufficient File Write Restrictions to Execution-Sensitive PathsCVE-2026-105918.6 High
- aws amazon braket python sdkInsecure Deserialization in Amazon Braket SDK Job Results ProcessingCVE-2026-9291Fix available7.5 High
- amazon kiro cliTool Execution Without Authorization via Piped Stdin in Kiro CLICVE-2026-92558.4 High
- aws rabbitmq awsArbitrary file read in rabbitmq-aws pluginCVE-2026-91338.3 High
- aws amazon redshift connector for pythonRemote Code Execution via eval() Injection in amazon-redshift-python-driverCVE-2026-8838Public exploitFix available9.3 Critical
- aws amazon sagemaker python sdkMissing integrity verification in Triton inference handler in Amazon SageMaker Python SDKCVE-2026-8597Fix available6.4 Medium
- aws amazon sagemaker python sdkCleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve pathCVE-2026-8596Fix available8.5 High
- aws amazon ecs agent, amazon ecs container agent +1 moreOS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume CredentialsCVE-2026-7461Fix available7.5 High
- amazon freertos-plus-tcpOut-of-Bounds Write via Unsanitized Prefix Length in Router Advertisement Processing in FreeRTOS-Plus-TCPCVE-2026-74266.1 Medium
- amazon freertos-plus-tcpOut-of-Bounds Read in Router Advertisement Option Parser in FreeRTOS-Plus-TCPCVE-2026-74256.0 Medium
- amazon freertos-plus-tcpInteger Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCPCVE-2026-74247.2 High
- amazon freertos-plus-tcpInteger Underflow in ICMP Echo Reply Processing in FreeRTOS-Plus-TCPCVE-2026-74236.0 Medium
- amazon freertos-plus-tcpMAC Address Validation Bypass in FreeRTOS-Plus-TCP IPv4 and IPv6 Packet ProcessingCVE-2026-74227.1 High
- aws qnabot on awsArbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWSCVE-2026-71918.6 High
- amazon tough, tuftool +1 moreMultiple Path Traversal Variants in awslabs/toughCVE-2026-69687.1 High
- amazon tough, tuftool +1 moreMissing Delegated Metadata Validation in awslabs/toughCVE-2026-6967Fix available7.1 High
- amazon tough, tuftool +1 moreSignature Threshold Bypass in awslabs/tough Delegated RolesCVE-2026-6966Fix available7.0 High
- aws ops wheelPrivilege Escalation via Self-Writable Cognito Custom Attribute in AWS Ops WheelCVE-2026-69128.7 High
- aws ops wheelAuthentication Bypass via Missing JWT Signature Verification in AWS Ops WheelCVE-2026-69119.3 Critical
- aws encryption sdk for pythonKey commitment policy bypass via shared key cache in AWS Encryption SDK for PythonCVE-2026-6550Fix available5.7 Medium
- aws sdk for go v2Denial of service in the event stream header decoder in AWS SDK for Go v2CVE-2026-89090Fix available8.2 High
- amazon firecrackerOut-of-bounds Write in Firecracker virtio-pci TransportCVE-2026-5747Fix available8.7 High
- amazon research and engineering studio, aws research and engineering studio (res) +1 moreAWS Research and Engineering Studio (RES) FileBrowser Command InjectionCVE-2026-57097.7 High
- amazon research and engineering studio, aws research and engineering studio (res) +1 moreImproper Control of User-Modifiable Attributes in RES CreateSession APICVE-2026-57088.7 High
- amazon research and engineering studio, aws research and engineering studio (res) +1 moreCommand Injection via Virtual Desktop Session Name in AWS Research and Engineering Studio (RES)CVE-2026-57078.7 High
- aws kiro ideKiro IDE Webview Cross-Site Scripting via Workspace Color ThemeCVE-2026-54297.1 High
- aws aws-c-event-streamAWS C Event Stream Streaming Decoder Stack Buffer OverflowCVE-2026-5190Fix available7.7 High
- aws aws-lc, aws-lc-fips +1 moreCRL Distribution Point Scope Check Logic Error in AWS-LCCVE-2026-4428Fix available9.1 Critical
- aws kiro ideArbitrary code execution via crafted project files in Kiro IDECVE-2026-42958.5 High
- amazon bedrock agentcore starter toolkitImproper S3 ownership verification in Bedrock AgentCore Starter ToolkitCVE-2026-4269Fix available5.8 Medium
- amazon aws api mcp server, aws api mcp server +1 moreAWS API MCP File Access Restriction BypassCVE-2026-4270Fix available6.8 Medium
- aws aws-lc, amazon aws-lc-sys, aws libcrypto +7 more +9 morePKCS7_verify Signature Validation Bypass in AWS-LCCVE-2026-3338Fix available8.7 High
- aws aws-lc, amazon aws-lc-fips-sys, aws-lc-sys +2 more +4 moreTiming Side-Channel in AES-CCM Tag Verification in AWS-LCCVE-2026-3337Fix available8.2 High
- aws aws-lc, amazon aws-lc-sys, aws libcrypto +7 more +9 morePKCS7_verify Certificate Chain Validation Bypass in AWS-LCCVE-2026-3336Fix available8.7 High
- aws sagemaker python sdkTLS disabled by default in select aws/sagemaker-python-sdk configurationsCVE-2026-1778Fix available8.2 High
- Show moreLoading…