SecAlerts
A

AWS

Security Risk Profile

51
/100
medium

Security Risk Score

Comprehensive risk assessment based on 55 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from August 18, 2020 to present

55
Total CVEs
24
Critical+High
2
Exploited
21
Unpatched

Threat Assessment

Avg CVSS
7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
21
Critical/High
Risk Level
51/100
medium
⚠️ 2 Active Exploits🆕 3Fresh (<7d)📈 19 in Last 30 Days

Severity Distribution

Critical
2
High
22
Medium
20
Low
1

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
9

Age Distribution

Common Weaknesses (CWE)

1
Path Traversal
5
2
XSS
3
3
Double Free
2
4
Use After Free
2
5
OS Command Injection
2

Most Affected Products

1. Ubuntu Ubuntu7
2. AWS aws-nitro-enclaves-sdk-c4
3. AWS AWS-LC3
4. AWS Advanced JDBC Wrapper RemoteQueryCachePlugin3
5. AWS Linux kernel3

Recent Vulnerabilities

See more →
CVE-2026-126087
CVSS 9.4critical

Untrusted search path in the cross-user process launcher in OpenJD Sessions for Python, as used in the AWS Deadline Cloud worker agent

Nov 10, 2026🔧 No Patch
CVE-2026-124033
CVSS 5.9medium

Relative path traversal in the log export commands in AWS ParallelCluster CLI

Nov 9, 2026🔧 No Patch
GHSA-h79v-mp93-644r
CVSS 5.9medium

Relative path traversal in the log export commands in AWS ParallelCluster CLI

Nov 9, 2026🔧 No Patch
https://reddit.com/r/netsec/comments/1xo0yov/escaping_aws_firecracker_from_guest_userspace_vmm/
unknown

Escaping AWS Firecracker from guest userspace: VMM memory corruption (CVE-2026-122192)

Nov 4, 2026🔧 No Patch
CVE-2026-116635
CVSS 6.9medium

Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

Nov 2, 2026🔧 No Patch
CVE-2026-120497
CVSS 4.6medium

Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

Nov 2, 2026🔧 No Patch
GHSA-gjmq-52p3-7fh2
CVSS 4.6medium

Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows

Nov 2, 2026🔧 No Patch
CVE-2026-119148
CVSS 8.2high

Unvalidated parent-supplied AWS Region in AWS aws-nitro-enclaves-sdk-c allows impersonation of the enclave's AWS KMS endpoint

Oct 30, 2026🔧 No Patch
GHSA-f6f6-6f88-r57j
CVSS 8.2high

Unvalidated parent-supplied AWS Region in AWS aws-nitro-enclaves-sdk-c allows impersonation of the enclave's AWS KMS endpoint

Oct 30, 2026🔧 No Patch
CVE-2026-119116
CVSS 8.7high

Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-c

Oct 30, 2026🔧 No Patch

Monitor AWS in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.