Cloud Platforms vulnerabilities

Latest Cloud Platforms CVEs

Newest publication first · page 12 of 40 · showing the latest 1,000

1. CVE-2026-17578 Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcement

   Published 2026-08-05

   Low·CVSS 2.3 EPSS 0.24%

   Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encryption keys with random nonces when the AWS IAM encryption feature is enabled. If a producer sends messages at a sustained...

2. GHSA-rwrp-9823-p2xq Flowise: Incomplete Credential Redaction Exposes Secrets via API

   Published 2026-08-04

   Medium·CVSS 6.5

   Summary The GET /api/v1/credentials/:id endpoint decrypts stored credential data and returns it in the plainDataObj field of the API response. While a redactCredentialWithPasswordType() function masks fields defined with type: 'password' in their component schema, many credential...

3. GHSA-88pr-878c-24wf Flowise: Authenticated arbitrary file write in the `S3 Directory` document loader via unsanitized S3 object keys

   Published 2026-08-04

   High·CVSS 7.2

   Summary Flowise on current main allows an authenticated user with documentStores:preview-process permission to trigger the S3 Directory document loader with attacker-controlled S3 object keys. The loader joins each returned S3 key with a temporary directory using path.join(tempDi...

4. CVE-2026-18830 Insufficient input validation in Amazon Bedrock AgentCore harness InvokeHarness API

   Published 2026-08-04

   High·CVSS 8.6 EPSS 0.51%

   Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model invocation and security controls via crafted content blocks in conversation messages. AWS has addressed this issue. No customer a...

5. CVE-2026-58139 DuckDB AWS Extension Security Policy Bypass via load_aws_credentials Procedure

   Published 2026-08-03

   Medium·CVSS 6.0 EPSS 0.51%

   The DuckDB AWS extension for DuckDB contains a security policy bypass vulnerability that allows any database user with SQL execution permissions to extract plaintext AWS credentials by calling the load_aws_credentials function with the redact_secret parameter set to false, circum...

6. CVE-2026-18654 Disabled SSH host key verification in Amazon AWS CLI EMR helper commands

   Published 2026-08-03

   Medium·CVSS 6.9 EPSS 0.46%

   Key exchange without entity authentication in the EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allow man-in-the-middle attackers to intercept SSHsessions and file transfers via network positioning between the client and the EMR clust...

7. CVE-2026-18655 Broker Credential and OAuth Token Disclosure in AWS Labs Amazon MQ MCP Server via Prompt Injection

   Published 2026-08-03

   High·CVSS 7.1 EPSS 0.42%

   Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the Amazon MQ MCP Server (awslabs.amazon-mq-mcp-server) before 2.0.24 may allow a remote unauthenticated actor (via prompt injection) to obtain Amazon MQ for RabbitMQ broker credentials or OAuth...

8. CVE-2026-18248 @fastify/aws-lambda vulnerable to Lambda event spoofing via client-controlled x-apigateway-event header

   Published 2026-08-03

   Critical·CVSS 9.1 EPSS 0.38%

   @fastify/aws-lambda version 6.4.0 decorates each Fastify request with request.awsLambda.event and request.awsLambda.context, values that applications are documented to use for authorization decisions such as reading API Gateway authorizer claims. In the default configuration, the...

9. CVE-2026-67308 Wazuh GitHub Actions Shell Injection via Fork Pull Request

   Published 2026-08-01

   Critical·CVSS 9.3 EPSS 0.73%

   Wazuh workflows before 44bf114 contain a shell injection vulnerability in GitHub Actions that allows attackers to execute arbitrary commands by submitting pull requests with crafted VERSION.json files. Attackers can inject shell metacharacters into environment variables that are...

10. CVE-2026-18481 Stored XSS in Participant URL Field leads to Account Takeover via Session Token Theft

    Published 2026-07-31

    Medium·CVSS 6.2 EPSS 0.51%

    Stored cross-site scripting in the participant URL handling in AWS Ops Wheel before PR #168 might allow an authenticated remote user to steal session tokens and escalate to full administrative control of the deployed instance via a crafted participant_url value containing a dange...

11. CVE-2026-66803 Azure Cosmos DB Remote Code Execution Vulnerability

    Published 2026-07-30

    Critical·CVSS 10.0 EPSS 0.90%

    Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network.

12. CVE-2026-18140 Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers

    Published 2026-07-30

    High·CVSS 8.7 EPSS 0.78%

    Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which the smithy-rs code generator invokes from every generated struct deserializer, might allow remote unauthenticated users to cause a denial of service (process abort via st...

13. CVE-2026-18245 Incomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-react

    Published 2026-07-30

    Medium·CVSS 6.4 EPSS 0.99%

    Improper control of code generation in Amazon @aws-amplify/codegen-ui-react before 2.20.6 might allow a remote authenticated user to execute arbitrary code in end-user browsers, developer machines, CI/CD environments, and server-side rendering contexts via crafted Studio componen...

14. CVE-2026-63239 Hard-coded AWS IAM credentials vulnerability

    Published 2026-07-29

    Medium·CVSS 5.4 EPSS 0.21%

    A hard-coded AWS IAM credentials vulnerability in Koollab LMS allowed an attacker to access shared multi-tenant S3 buckets and SQS queues, exposing sensitive data and enabling malicious content injection, job manipulation, or email interception.

15. CVE-2026-59931 PhpSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist

    Published 2026-07-28

    High·CVSS 7.7 EPSS 0.47%

    PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In versions 4.0.0 through 5.8.0, 3.3.0 through 3.10.6, 2.2.0 through 2.4.6, 2.0.0 through 2.1.17, and all releases up to and including 1.30.5, the WEBSERVICE() domain whitelist can be bypassed via an...

16. CVE-2026-16481 Server-Side Request Forgery (SSRF) and Credential Exfiltration in googleapis/mcp-toolbox cloud-healthcare-fhir-fetch-page Tool

    Published 2026-07-27

    Medium·CVSS 6.0 EPSS 0.19%

    A Server-Side Request Forgery (SSRF) and credential exfiltration vulnerability exists in the cloud-healthcare-fhir-fetch-page tool of googleapis/mcp-toolbox. The tool takes an unvalidated pageURL parameter from the client and issues an HTTP GET request to it using an authenticate...

17. CVE-2026-62835 Azure Portal Information Disclosure Vulnerability

    Published 2026-07-24

    High·CVSS 7.5 EPSS 0.97%

    Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network.

18. CVE-2026-48035 Hulumi: AccountFoundation audit-delivery S3 bucket could be silently weakened

    Published 2026-07-24

    High·CVSS 7.1 EPSS 0.45%

    Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, consumers using AccountFoundation could ship an AWS account whose CloudTrail / Config audit logs were deletable by any S3-delete-capable...

19. GHSA-464c-974j-9xm6 AWS CDK CodeBuild S3 Log Encryption Boolean Inversion

    Published 2026-07-24

    Low·CVSS 3.3

    Summary The AWS Cloud Development Kit (AWS CDK) is an open-source software development framework for defining cloud infrastructure in code and provisioning it through AWS CloudFormation. We identified an issue in which explicitly setting encrypted: true on the S3LoggingOptions pr...

20. CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

    Published 2026-07-24

    Critical·CVSS 10.0 EPSS 0.90%

    Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.

21. CVE-2026-58630 Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability

    Published 2026-07-24

    Critical·CVSS 9.8 EPSS 0.87%

    Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges over a network.

22. MAL-2026-11049 Malicious code in mrmustard (PyPI)

    Published 2026-07-24

    Unknown

    -= Per source details. Do not edit below this line.=- Source: amazon-inspector (535679eb30bfd0600dc07e44d2e649c88ecb6274364e2ba0b1ef2ccc05976727) On plain import mrmustard, the top-level init.py spawns a background thread that reads ~/.ssh/ private keys, ~/.aws/credentials, ~/.aw...

23. CVE-2026-15810 Cross-Site Scripting (XSS) in Looker allows Admin Account Takeover

    Published 2026-07-24

    High·CVSS 8.7 EPSS 0.45%

    A Cross-Site Scripting (XSS) vulnerability in Google Cloud Looker versions prior to 25.6.103, 25.12.65, 25.18.68, 26.0.66, 26.2.47, 26.4.36, 26.6.28, and 26.8.7 on Looker-hosted and Self-hosted allows an attacker to execute arbitrary JavaScript leading to administrative account t...

24. MAL-2026-11048 Malicious code in karpatkit (PyPI)

    Published 2026-07-24

    Unknown

    -= Per source details. Do not edit below this line.=- Source: amazon-inspector (df2d9d6dd18d56c6ef8303bc90a0254383b3a7b0f202f5e50b7a1c6ceafd77f7) On import karpatkit, the top-level __init__.py invokes _compat.check() which spawns a daemon thread that collects os.environ, the Kube...

25. MAL-2026-11047 Malicious code in karpatkey (PyPI)

    Published 2026-07-24

    Unknown

    -= Per source details. Do not edit below this line.=- Source: amazon-inspector (b434ae7cf6afb9ce18a54757c03069983e404db695d959bd29aa628864b8349c) On import karpatkey, the top-level karpatkey/__init__.py spawns a daemon background thread that walks the installer's home directory a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.