Security Signal

← Cyber news feed

Confirmed 100VulnerabilityFirst seen 26 Oct 2026, 16:50 UTC

CVE-2026-115418 - SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS)

Vendor AWS

Coverage

HeadlineSourceTypePublished
CVE-2026-115418 - SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS) AWS Security BulletinsOfficial26 Oct 2026, 16:50 UTC

Vulnerabilities

CVEExploited (CISA KEV)CVSSEPSS
CVE-2026-115418 No — —

CVSS from NVD; EPSS is FIRST’s estimate of the chance of exploitation in the next 30 days.

Why this score

Most trusted source90
Independent organisations reporting it (1)+0
Confirmed by an official source or CISA KEV+10
Confidence100 · Confirmed
We link to the original reporting and don’t reproduce it. Read the sources above for the full details.