CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

Amazon — security advisories

34 advisorieslatest 2026-08-25⚡ RSS feed

Tracked Amazon products:

⚡ Watch Amazon

Get an email when a new Amazon advisory drops — max one per day, one-click unsubscribe.

CVE-2026-78379 - Consent bypass in Strands Agents Tools python_repl tool

unknownCVE-2026-78379aws2026-08-25

CVE-2026-7461 - OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials

unknownCVE-2026-7461aws2026-08-20

CVE-2026-4428: Issues with AWS-LC - CRL Distribution Point Scope Check Logic Error

unknownCVE-2026-4428aws2026-08-20

CVE-2026-7791 - Local Privilege Escalation via TOCTOU Race Condition in Amazon WorkSpaces Skylight Agent

criticalCVE-2026-7791aws2026-08-20

CVE-2026-10584 - HTTPS Fallback to HTTP in Graph Explorer

unknownCVE-2026-10584aws2026-08-20

Issue with FreeRTOS-Plus-TCP - MAC Address Validation Bypass and ICMP Echo Reply Integer Underflow

unknownCVE-2026-7422 CVE-2026-7423aws2026-08-20

CVE-2026-14471 - Authenticated SQL injection in the metrics-service retention policy subsystem of mcp-gateway-registry

unknownCVE-2026-14471aws2026-08-20

CVE-2026-9133 - Arbitrary file read in rabbitmq-aws plugin

unknownCVE-2026-9133aws2026-08-20

Issue with AWS Ops Wheel (CVE-2026-6911 and CVE-2026-6912

unknownCVE-2026-6911 CVE-2026-6912aws2026-08-20

CVE-2026-4270 - AWS API MCP File Access Restriction Bypass

unknownCVE-2026-4270aws2026-08-20

CVE-2026-9291 - Insecure Deserialization in Amazon Braket SDK Job Results Processing

unknownCVE-2026-9291aws2026-08-20

CVE-2026-12283 - Issue with Athena Federated Query Synapse Connector

unknownCVE-2026-12283aws2026-08-20

CVE-2026-18654 - Disabled SSH host key verification in AWS CLI EMR helper commands

unknownCVE-2026-18654aws2026-08-20

CVE-2026-18655 - Broker Credential and OAuth Token Disclosure in AWS Labs Amazon MQ MCP Server via Prompt Injection

unknownCVE-2026-18655aws2026-08-20

Incomplete fix for CVE-2025-4318 code injection in Amazon &commat;aws-amplify/codegen-ui-react

unknownCVE-2025-4318aws2026-08-20

CVE-2026-75935 and CVE-2026-75936 - Issue with Amazon ion-java - Memory-amplification denial of service

unknownCVE-2026-75935 CVE-2026-75936aws2026-08-20

CVE-2026-75897 - Uncontrolled resource consumption in OpenSearch Dashboards capabilities route

unknownCVE-2026-75897aws2026-08-20

CVE-2026-75910 - Issue with Athena Federated Query Clickhouse Connector

unknownCVE-2026-75910aws2026-08-20

CVE-2026-6437 - Mount Option Injection in Amazon EFS CSI Driver

unknownCVE-2026-6437aws2026-08-20

Issue with FreeRTOS-Plus-TCP - IPv6 Router Advertisement Memory Safety Issues

unknownCVE-2026-7425 CVE-2026-7426aws2026-08-20

Issues with Amazon Athena ODBC Driver

unknownCVE-2026-5485 CVE-2026-35558 CVE-2026-35559 CVE-2026-35560aws2026-08-20

Issues in tough library and tuftool CLI utility

unknownCVE-2026-6966 CVE-2026-6967 CVE-2026-6968aws2026-08-20

CVE-2022-46174: Race condition during concurrent TLS mounts in efs-utils

mediumCVSS 4.2CVE-2022-46174msrc2026-08-06

CVE-2024-40999: net: ena: Add validation for completion descriptors consistency

mediumCVSS 5.5CVE-2024-40999msrc2026-08-06

[Redirected] Memory Dump Issue in AWS CodeBuild

unknownCVE-2025-8217aws2026-06-05

CVE-2025-9039 - Issue with Amazon ECS agent introspection server

unknownCVE-2025-9039aws2026-06-05

CVE-2025-11573 - Denial of Service issue in Amazon.IonDotnet

unknownCVE-2025-11573aws2026-06-05

CVE-2025-12829 - Integer Overflow issue in Amazon Ion-C

unknownCVE-2025-12829aws2026-06-05

Amazon Q Developer and Kiro – Prompt Injection Issues in Kiro and Q IDE plugins

unknownaws2026-06-05

IMDS impersonation

unknownaws2026-06-05

CVE-2025-8904 - Issue with Amazon EMR Secret Agent component

unknownCVE-2025-8904aws2026-06-05

CVE-2025-31133, CVE-2025-52565, CVE-2025-52881 - runc container issues

unknownCVE-2025-31133 CVE-2025-52565 CVE-2025-52881aws2026-06-05

Privilege Escalation in Aurora PostgreSQL using AWS JDBC Wrapper, AWS Go Wrapper, AWS NodeJS Wrapper, AWS Python Wrapper, AWS PGSQL ODBC driver

lowCVE-2025-12967aws2026-06-05

CVE-2025-6031 - Insecure device pairing in end-of-life Amazon Cloud Cam

unknownCVE-2025-6031aws2026-06-05