AI and data stack advisories

Severe, 6 weeks1498Projects326

1498 severe, 6 weeks · 326 projects

AWSAWS-2026-107

Server-side request forgery in the Session Manager port forwarding functionality in AWS...

AWS

CVE-2026-89049 · Published Oct 25, 2026

Critical9.9
No fix yet
AWS advisory

Read this article

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.

Changes since it was listed

SeveritySep 27Severity: Unrated to Critical
Details and references
Severity from
NVD

More AWS advisories

All AWS
Medium 5.9Oct 25Denial of service in the event stream header decoder in AWS SDK for Go v2CVE-2026-89090no fix yetMedium 5.9Oct 25XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePluginCVE-2026-18061no fix yetHigh 7.1Oct 25Issue with projen - Path traversal and OS command injectionCVE-2026-89065no fix yetCritical 9.1Oct 25Integer overflow in tensor buffer validation in Deep Java LibraryCVE-2026-85228no fix yetMedium 6.8Oct 25eMudhra intermediate CA key recovery in AWS trust bundlesCVE-2026-111943no fix yetHigh 8.7Oct 25Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch DashboardsCVE-2026-84942no fix yet