Advisory

Amazon advisory

Public advisories from vendor feeds, with related items from the same catalog.

All advisoriesOverview
Aug 3, 2026, 03:43 PM EDT
CVE-2026-18654

Related advisories

More recent public advisories for Amazon.

  • CVE-2026-18733 - Prompt injection bypasses shell tool consent gate in Strands Agents Tools
  • CVE-2026-18655 - Broker Credential and OAuth Token Disclosure in AWS Labs Amazon MQ MCP Server via Prompt Injection
  • CVE-2026-18394 - Incorrect authorization in Strands Agents Tools http_request tool
  • CVE-2026-18420 - Remote Code Execution via Prototype Pollution in OpenSearch Dashboards TSVB Plugin
  • Incomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-react

Monitor your vendor estate

Real-time incidents, advisories, and maintenance across the vendors you depend on.

Try for freeExplore Huntertech