CVE-2026-82863highCWE-778

CVE-2026-82863: high-severity vulnerability in hulumi baseline

@hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detection

Published · Updated

Follow this CVE+ Monitor baseline+ Monitor @hulumi/baseline

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 0.2%
@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
hulumi · baseline