Security Signal
Threat intelligence report · last 30 days

Vulnerability · AWS

Generated 5 Nov 2026, 14:45 UTC · Live view: news.rogelio.cloud/?show=all&category=vulnerability&vendor=AWS

Executive summary

  • 22 stories in the last 30 days; 14 (64%) confirmed by official sources.
  • No actively exploited vulnerabilities in this selection.
  • Most common topic: Vulnerability (22).
  • Most reported vendor: AWS (14 stories).
22
Stories
0
Actively exploited
0
Breaches & ransomware
14
Confirmed by official sources

Stories per day

5 10-0710-1210-1710-2210-2711-0111-05

Daily breakdown, last 14 days

2026-10-23: 1 stories (0 exploited, 0 breaches/ransomware) F2312026-10-24: 0 stories (0 exploited, 0 breaches/ransomware) S242026-10-25: 1 stories (0 exploited, 0 breaches/ransomware) S2512026-10-26: 1 stories (0 exploited, 0 breaches/ransomware) M2612026-10-27: 0 stories (0 exploited, 0 breaches/ransomware) T272026-10-28: 2 stories (0 exploited, 0 breaches/ransomware) W2822026-10-29: 2 stories (0 exploited, 0 breaches/ransomware) T2922026-10-30: 1 stories (0 exploited, 0 breaches/ransomware) F3012026-10-31: 0 stories (0 exploited, 0 breaches/ransomware) S312026-11-01: 0 stories (0 exploited, 0 breaches/ransomware) S12026-11-02: 5 stories (0 exploited, 0 breaches/ransomware) M252026-11-03: 4 stories (0 exploited, 0 breaches/ransomware) T342026-11-04: 3 stories (0 exploited, 0 breaches/ransomware) W432026-11-05: 1 stories (0 exploited, 0 breaches/ransomware) T51

Exploited Breach / ransomware Other

Topics

  • Vulnerability — 22 (100%)

Most reported vendors

AWS14SonicWall2Apache1Barracuda1Cisco1Google1Microsoft1

Top stories · newest days first, most confident within each day

  1. Reported 70Vulnerability
    5 Nov 2026
    Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws Source: SecurityWeek
    Vendor CiscoVendor SonicWall
  2. Confirmed 100Vulnerability
    4 Nov 2026
    CVE-2026-122192 - Guest Access to Firecracker Process Memory After a Failed Memory Discard 2 sources: AWS Security Bulletins, r/netsec
    Vendor AWS
    CVE-2026-122192
  3. Reported 70Vulnerability
    4 Nov 2026
    SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records Source: The Hacker News
    Vendor SonicWall
    CVE-2026-109593
  4. Reported 70Vulnerability
    4 Nov 2026
    Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory Source: The Hacker News
  5. Confirmed 100Vulnerability
    3 Nov 2026
    CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115413
  6. Confirmed 100Vulnerability
    3 Nov 2026
    CVE-2026-121652 - Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-121652
  7. Reported 70Vulnerability
    3 Nov 2026
    Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access Source: The Hacker News
    Vendor Barracuda
    CVE-2026-116606
  8. Unverified 30Vulnerability
    3 Nov 2026
    A primer on TETRA mission-critical radio network authentication flaws Source: r/netsec
    Impact Everyday life
  9. Confirmed 100Vulnerability
    2 Nov 2026
    CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-116635
  10. Confirmed 100Vulnerability
    2 Nov 2026
    CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-105811
  11. Confirmed 100Vulnerability
    2 Nov 2026
    CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-120497
  12. Confirmed 100Vulnerability
    2 Nov 2026
    CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas Source: AWS Security Bulletins
    Impact Everyday lifeVendor AWSVendor Apache
    CVE-2026-119301
  13. Reported 70Vulnerability
    2 Nov 2026
    Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers Source: The Hacker News
  14. Confirmed 100Vulnerability
    30 Oct 2026
    CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-119116CVE-2026-119148
  15. Confirmed 100Vulnerability
    29 Oct 2026
    CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-119115
  16. Reported 70Vulnerability
    29 Oct 2026
    Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched Source: The Register (Security)
    Vendor Microsoft
  17. Confirmed 100Vulnerability
    28 Oct 2026
    CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-118029
  18. Reported 60Vulnerability
    28 Oct 2026
    Chrome and Firefox updates fix serious security flaws. Install now Source: Malwarebytes Labs
    Vendor Google
  19. Confirmed 100Vulnerability
    26 Oct 2026
    CVE-2026-115418 - SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS) Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115418
  20. Confirmed 100Vulnerability
    25 Oct 2026
    CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-111943
  21. Confirmed 100Vulnerability
    23 Oct 2026
    CVE-2026-115845 - Incomplete validation in the run_script Python sandbox in AWS MCP Server Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115845
  22. Confirmed 100Vulnerability
    22 Oct 2026
    CVE-2026-115417 - Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqtt Source: AWS Security Bulletins
    Vendor AWS
    CVE-2026-115417

Vulnerabilities to watch

CVEProductExploitedCVSSEPSS
CVE-2026-116606No—0.7%
CVE-2026-109593No—0.5%
CVE-2026-111943No—0.4%
CVE-2026-115417No—0.4%
CVE-2026-119301No—0.3%
CVE-2026-105811No—0.3%
CVE-2026-116635No—0.3%
CVE-2026-115845No—0.3%
CVE-2026-121652No—0.3%
CVE-2026-120497No—0.2%
CVE-2026-119148No—0.2%
CVE-2026-115418No—0.2%

Sources: official agencies, vendor security teams and the security press, linked from each story. Confidence scores reflect who reported each story. Tags and summaries are generated automatically and may be incomplete.