CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

Amazon — security advisories

24 advisorieslatest 2026-07-06⚡ RSS feed

Tracked Amazon products:

⚡ Watch Amazon

Get an email when a new Amazon advisory drops — max one per day, one-click unsubscribe.

CVE-2026-14471 - Authenticated SQL injection in the metrics-service retention policy subsystem of mcp-gateway-registry

unknownCVE-2026-14471aws2026-07-06

CVE-2026-7461 - OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials

unknownCVE-2026-7461aws2026-06-05

CVE-2025-8904 - Issue with Amazon EMR Secret Agent component

highCVE-2025-8904aws2026-06-05

CVE-2026-4428: Issues with AWS-LC - CRL Distribution Point Scope Check Logic Error

unknownCVE-2026-4428aws2026-06-05

CVE-2026-7791 - Local Privilege Escalation via TOCTOU Race Condition in Amazon WorkSpaces Skylight Agent

criticalCVE-2026-7791aws2026-06-05

CVE-2026-10584 - HTTPS Fallback to HTTP in Graph Explorer

unknownCVE-2026-10584aws2026-06-05

CVE-2025-31133, CVE-2025-52565, CVE-2025-52881 - runc container issues

unknownCVE-2025-31133 CVE-2025-52565 CVE-2025-52881aws2026-06-05

CVE-2026-6437 - Mount Option Injection in Amazon EFS CSI Driver

unknownCVE-2026-6437aws2026-06-05

CVE-2025-6031 - Insecure device pairing in end-of-life Amazon Cloud Cam

unknownCVE-2025-6031aws2026-06-05

[Redirected] Memory Dump Issue in AWS CodeBuild

unknownCVE-2025-8217aws2026-06-05

Issue with FreeRTOS-Plus-TCP - IPv6 Router Advertisement Memory Safety Issues

unknownCVE-2026-7425 CVE-2026-7426aws2026-06-05

CVE-2025-11573 - Denial of Service issue in Amazon.IonDotnet

unknownCVE-2025-11573aws2026-06-05

CVE-2025-12829 - Integer Overflow issue in Amazon Ion-C

unknownCVE-2025-12829aws2026-06-05

Amazon Q Developer and Kiro – Prompt Injection Issues in Kiro and Q IDE plugins

unknownaws2026-06-05

IMDS impersonation

unknownaws2026-06-05

Issues with Amazon Athena ODBC Driver

unknownCVE-2026-5485 CVE-2026-35558 CVE-2026-35559 CVE-2026-35560aws2026-06-05

Issues in tough library and tuftool CLI utility

unknownCVE-2026-6966 CVE-2026-6967 CVE-2026-6968aws2026-06-05

Issue with FreeRTOS-Plus-TCP - MAC Address Validation Bypass and ICMP Echo Reply Integer Underflow

unknownCVE-2026-7422 CVE-2026-7423aws2026-06-05

CVE-2026-9133 - Arbitrary file read in rabbitmq-aws plugin

unknownCVE-2026-9133aws2026-06-05

CVE-2025-9039 - Issue with Amazon ECS agent introspection server

unknownCVE-2025-9039aws2026-06-05

Issue with AWS Ops Wheel (CVE-2026-6911 and CVE-2026-6912

unknownCVE-2026-6911 CVE-2026-6912aws2026-06-05

CVE-2026-4270 - AWS API MCP File Access Restriction Bypass

unknownCVE-2026-4270aws2026-06-05

Privilege Escalation in Aurora PostgreSQL using AWS JDBC Wrapper, AWS Go Wrapper, AWS NodeJS Wrapper, AWS Python Wrapper, AWS PGSQL ODBC driver

lowCVE-2025-12967aws2026-06-05

CVE-2026-9291 - Insecure Deserialization in Amazon Braket SDK Job Results Processing

unknownCVE-2026-9291aws2026-06-05

Amazon security advisories · CSIRTS