| 1 | CVE-2026-122192 - Guest Access to Firecracker Process Memory After a Failed Memory Discard
Original article | Confirmed 100
Vulnerability | 4 Nov 2026 |
| 2 | CVE-2026-115413 - AWS API MCP Server OAuth token audience validation bypass
Original article | Confirmed 100
Vulnerability | 3 Nov 2026 |
| 3 | CVE-2026-121652 - Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering
Original article | Confirmed 100
Vulnerability | 3 Nov 2026 |
| 4 | CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server
Original article | Confirmed 100
Vulnerability | 2 Nov 2026 |
| 5 | CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS
Original article | Confirmed 100
Vulnerability | 2 Nov 2026 |
| 6 | CVE-2026-120497 - Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows
Original article | Confirmed 100
Vulnerability | 2 Nov 2026 |
| 7 | CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas
Original article | Confirmed 100
Vulnerability | 2 Nov 2026 |
| 8 | CVE-2026-119116 and CVE-2026-119148 - Issues in AWS Nitro Enclaves SDK for C
Original article | Confirmed 100
Vulnerability | 30 Oct 2026 |
| 9 | CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes
Original article | Confirmed 100
Vulnerability | 29 Oct 2026 |
| 10 | SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records
Original article | Reported 70
Vulnerability | 4 Nov 2026 |
| 11 | Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory
Original article | Reported 70
Vulnerability | 4 Nov 2026 |
| 12 | Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access
Original article | Reported 70
Vulnerability | 3 Nov 2026 |
| 13 | Critical Langflow Flaws Could Let Unauthenticated Attackers Run Code on Servers
Original article | Reported 70
Vulnerability | 2 Nov 2026 |
| 14 | Researchers find bugs in 5 AI developer tools, with OpenAI and Microsoft flaws still unpatched
Original article | Reported 70
Vulnerability | 29 Oct 2026 |