aws Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by aws
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Input Validation Issue in OpenSearch Security Analytics Plugin
CVE-2026-18952AwsOpensearch8.6HIGHMissing Authorization in Amazon OpenSearch Alerting Plugin
CVE-2026-19311AwsOpensearch8.6HIGHInsecure Direct Object Reference in Amazon Strands Agents Tools
CVE-2026-19111AwsStrands-agents-tools8.6HIGHInput Validation Flaw in Amazon Bedrock AgentCore by AWS
CVE-2026-18830AwsAmazon Bedrock Agentco...👾🟡8.6HIGHPrompt Injection Vulnerability in Amazon Strands Agents Tools
CVE-2026-18733AwsStrands-agents-tools7.5HIGHImproper Endpoint Restriction in Amazon MQ MCP Server by AWS Labs
CVE-2026-18655AwsAmazon-MQ-mcp-server7.1HIGHUncontrolled Recursion Vulnerability in AWS Smithy JSON Runtime Crate
CVE-2026-18140AwsAws-smithy-json8.7HIGHImproper Neutralization Vulnerability in AWS Bedrock AgentCore Python SDK
CVE-2026-16796AwsBedrock-agentcore 1.18.18.4HIGHDenial of Service Vulnerability in Amazon AWS Smithy HTTP Server
CVE-2026-16756AwsAws-smithy-http-server8.7HIGHInitialization Failure in AWS API MCP Server Allows Bypassing Security Policies
CVE-2026-16584AwsAws-api-mcp-server7.3HIGHMissing Validation in s2n-tls Affects TLS 1.3 Connections
CVE-2026-16317AwsS2n-tls8.3HIGHUncontrolled Recursion Vulnerability in Smithy-RS Framework Affecting AWS SDK for Rust
CVE-2026-15957AwsAws-sdk-rust8.7HIGHOS Command Injection Vulnerability in AWS jsii-diff Package
CVE-2026-15895AwsJsii8.4HIGHServer-Side Request Forgery in AWS HealthLake MCP Server by AWS
CVE-2026-15643AwsAwslabs.healthlake-mcp...9.2CRITICALImproper Link Resolution in AWS Research and Engineering Studio
CVE-2026-14904AwsRes7.1HIGHSQL Injection Vulnerability in Amazon mcp-gateway-registry
CVE-2026-14471AwsMcp Gateway & Registry8.6HIGHDeserialization Vulnerability in AWS Advanced JDBC Wrapper by Amazon
CVE-2026-14265AwsAws Advanced Jdbc Wrapper7.7HIGHOS Command Injection in AWS CDK Library Impacting Node.js Functions
CVE-2026-13760AwsAws Cdk7HIGHHTTP/2 Request Interpretation Flaw in AWS Application Load Balancer
CVE-2026-13763AwsAws Application Load B...7.9HIGHHTTP/2 Request Interpretation Vulnerability in Amazon CloudFront
CVE-2026-13762AwsAmazon Cloudfront7.9HIGHCommand Execution Vulnerability in AWS Bedrock AgentCore Python SDK
CVE-2026-12530AwsBedrock-agentcore8.4HIGHMemory Corruption Issue in AWS Common Runtime's HTTP Library
CVE-2026-12043AwsAws-c-http8.7HIGHOS Command Injection in AWS CDK Toolchain Affecting AWS
CVE-2026-11417AwsAws Cloud Development ...7HIGHArbitrary Code Execution Vulnerability in AWS AgentCore CLI
CVE-2026-11393AwsAgentcore Cli8.8HIGHPrivilege Escalation Vulnerability in AWS Advanced Go Wrapper for Amazon Aurora PostgreSQL
CVE-2026-11401AwsAws Advanced Go Wrapper8.6HIGH