en
AWS, or Amazon Web Services, is Amazon's global cloud-computing provider. It delivers on-demand infrastructure and managed services across compute, storage, databases, networking, security, analytics, developer tools, and AI. AWS supports organizations ranging from startups to enterprises and public-sector users.
As of 10/23/2026, AWS recorded 65 security vulnerabilities in the last 90 days across 58 products, including 39 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, loom had the most security vulnerabilities in the AWS ecosystem, with 3 vulnerabilities—approximately 4.62% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-115845Incomplete validation in the run_script Python sandbox in AWS MCP ServerCVE-2026-115813Server-side request forgery in the model download path in Amazon Web Services Multi Model ServerCVE-2026-115812Relative path traversal during model archive extraction in Amazon Web Services Multi Model ServerCVE-2026-115417Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in aws-c-mqttCVE-2026-115419Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server172 Results | Page 1 of 18
| SeverityMedium |
| SeverityCritical |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityMedium |
| SeverityCritical |
| SeverityHigh |
| SeverityCritical |