Security Signal

← Cyber news feed

Confirmed 100VulnerabilityFirst seen 3 Nov 2026, 18:54 UTC

CVE-2026-121652 - Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering

Coverage

HeadlineSourceTypePublished
CVE-2026-121652 - Stored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup rendering AWS Security BulletinsOfficial3 Nov 2026, 18:54 UTC

Vulnerabilities

CVEExploited (CISA KEV)CVSSEPSS
CVE-2026-121652 No — —

CVSS from NVD; EPSS is FIRST’s estimate of the chance of exploitation in the next 30 days.

Why this score

Most trusted source90
Independent organisations reporting it (1)+0
Confirmed by an official source or CISA KEV+10
Confidence100 · Confirmed
We link to the original reporting and don’t reproduce it. Read the sources above for the full details.