Security Signal

← Cyber news feed

Confirmed 100VulnerabilityFirst seen 2 Nov 2026, 21:43 UTC

CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

Vendor AWS

Coverage

HeadlineSourceTypePublished
CVE-2026-116635 - Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server AWS Security BulletinsOfficial2 Nov 2026, 21:43 UTC

Vulnerabilities

CVEExploited (CISA KEV)CVSSEPSS
CVE-2026-116635 No — —

CVSS from NVD; EPSS is FIRST’s estimate of the chance of exploitation in the next 30 days.

Why this score

Most trusted source90
Independent organisations reporting it (1)+0
Confirmed by an official source or CISA KEV+10
Confidence100 · Confirmed
We link to the original reporting and don’t reproduce it. Read the sources above for the full details.