Vulnerabilities in aws
194 resultsCVE-2026-6968HIGHMultiple Path Traversal Variants in awslabs/toughEPSS 0.5%CVE-2026-110248MEDIUMInsertion of sensitive information into log files in Amazon SageMaker Python SDK git_utils[.]pyEPSS 0.5%CVE-2026-115812CRITICALRelative path traversal during model archive extraction in Amazon Web Services Multi Model ServerEPSS 0.5%CVE-2022-23511HIGHA privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting metrics and logs from Amazon EC2EPSS 0.5%CVE-2026-18394MEDIUMIncorrect authorization in Strands Agents Tools http_request proxy credential exfiltrationEPSS 0.5%CVE-2026-119924HIGHOut-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name ParserEPSS 0.5%CVE-2026-18952HIGHMissing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics PluginEPSS 0.5%CVE-2026-19111HIGHInsecure direct object reference in Strands Agents Tools memory tool namespace isolationEPSS 0.5%CVE-2026-77811MEDIUMStored Cross-Site Scripting via Integration Template Asset in OpenSearch DashboardsEPSS 0.5%CVE-2025-14503HIGHOverly Permissive Trust Policy in Harmonix on AWS EKSEPSS 0.5%CVE-2026-18481MEDIUMStored XSS in Participant URL Field leads to Account Takeover via Session Token TheftEPSS 0.5%CVE-2026-1777HIGHCleartext transmission of sensitive materials in aws/sagemaker-python-sdkEPSS 0.5%CVE-2026-8597MEDIUMMissing integrity verification in Triton inference handler in Amazon SageMaker Python SDKEPSS 0.5%CVE-2026-18830HIGHInsufficient input validation in Amazon Bedrock AgentCore harness InvokeHarness APIEPSS 0.5%CVE-2026-75910HIGHIncorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment templateEPSS 0.5%CVE-2026-19642MEDIUMOut-of-bounds write in the Base64 decoder in Amazon aws-sdk-cppEPSS 0.5%CVE-2026-11400HIGHPrivilege Escalation in AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQLEPSS 0.5%CVE-2026-18654MEDIUMDisabled SSH host key verification in Amazon AWS CLI EMR helper commandsEPSS 0.5%CVE-2026-18061MEDIUMImproper Restriction of XML External Entity References in AWS Advanced JDBC Wrapper RemoteQueryCachePluginEPSS 0.5%CVE-2026-112407HIGHIncorrect privilege assignment in AWS CICD-toolchain-for-serverless-applicationsEPSS 0.5%