CriticalCVSS 9.8
EPSS 0.92%
Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network.
Technology
Cloud Platforms vulnerabilities
Public cloud services and their SDKs/agents (AWS, Azure, Google Cloud). 1,417 published CVES affecting Cloud Platforms, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 1,417
- Critical
- 242
- High
- 530
- Medium
- 447
- Low
- 33
- Unscored
- 165
- CISA KEV
- 8
Latest Cloud Platforms CVEs
Newest publication first · page 13 of 40 · showing the latest 1,000
-
-
CriticalCVSS 9.8 EPSS 0.92%
Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges over a network.
-
HighCVSS 7.2 EPSS 0.70%
Improper access control in Azure API Management (APIM) allows an authorized attacker to execute code over a network.
-
CriticalCVSS 9.9 EPSS 0.79%
Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker to elevate privileges over a network.
-
HighCVSS 8.8 EPSS 0.55%
Server-side request forgery (ssrf) in Azure AI Search allows an authorized attacker to elevate privileges over a network.
-
HighCVSS 8.4 EPSS 0.73%
Improper neutralization of argument delimiters in the install_packages() method in AWS Bedrock AgentCore Python SDK before 1.18.1 might allow a remote authenticated user to execute arbitrary commands within the Code Interpreter sandbox via crafted package name arguments. To mitig...
-
HighCVSS 8.7 EPSS 0.75%
Missing connection and header-read timeouts and the absence of a concurrent-connection cap in the default serve() path of Amazon aws-smithy-http-server might allow remote attackers to cause a denial of service by opening many connections and sending partial requests that are neve...
-
HighCVSS 7.3 EPSS 0.23%
Improper handling of an initialization failure in AWS API MCP Server from 0.2.13 through 1.3.46 might allow an actor to bypass the user-configured security policy and execute AWS API operations that the policy was set to deny or gate. When initialization of the security policy en...
-
MediumCVSS 5.1 EPSS 0.25%
n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a credential exposure vulnerability: when configured with a Google Service Account key, the full PEM private key was mistakenly placed in the JWT header's kid field (intended only for a key identifier). Because JWT headers...
-
HighCVSS 7.1 EPSS 0.47%
CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game. Prior to version 1.119.0, CC-Tweaked's HTTP API (http.request, http.websocket) blocks requests to private network ranges to prevent server-side request forgery (SSRF). This protec...
-
HighCVSS 8.7 EPSS 0.41%
Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, powering the AWS SDK for Rust and custom service implementations. Uncontrolled recursion in the JSON, CBOR, and XML deserializer functions emitted...
-
HighCVSS 8.7 EPSS 0.50%
PraisonAI is a multi-agent teams system. Prior to version 4.6.40, the fix for GHSA-9mqq-jqxf-grvw / CVE-2026-44336 is incomplete. The original advisory description named four vulnerable handlers in mcp_server/adapters/cli_tools.py. Commit 68cc9427 ("fix(security): harden MCP rule...
-
Unknown
-= Per source details. Do not edit below this line.=- Source: amazon-inspector (318b93ddaafba751bab93b48efbef99f4eb45f143b019d7ff0f74735e434f378) roles_royce/init.py invokes a hidden _check_env() routine at import time that spawns a background thread harvesting installer secrets...
-
Unknown
-= Per source details. Do not edit below this line.=- Source: amazon-inspector (fc3facb1f07ed97dd9001874b4c4666b939bbff2ff4d8c5859d22e6013ed0c5d) On import defi_kit, the module _compat.py runs check() which spawns a daemon thread that harvests long-lived credentials from the inst...
-
CriticalCVSS 10.0 EPSS 0.77%
@beproduct/nestjs-auth is a NestJS authentication module for BeProduct IDS (Identity Server) with OpenID Connect support. Between 2026-05-11 20:19 UTC and 22:56 UTC, an attacker used a compromised npm publish token to publish 18 malicious versions of @beproduct/nestjs-auth (0.1.2...
-
MediumCVSS 6.8 EPSS 0.35%
AWS HealthOmics is a HIPAA-eligible service that fully manages the compute, storage, and workflow engine infrastructure required to run bioinformatics analyses at scale for clinical diagnostics, drug discovery, and agricultural research. Improper limitation of a pathname to a res...
-
HighCVSS 7.1 EPSS 0.40%
oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link("victim.secret", "<extract_base>/payload.tar.gz/evil_cwd...
-
MediumCVSS 6.1 EPSS 0.59%
Amazon Athena is a serverless, interactive query service that lets you analyze data directly in Amazon S3 using standard SQL. Athena Query Federation is a feature that allows you to connect to data sources outside of Amazon S3 like DynamoDB, Azure Synapse, and custom connectors u...
-
CVE-2026-12715 Missing Authorization in Firebase Studio allows Cross-Tenant Source Code Theft
PublishedHighCVSS 8.5 EPSS 0.35%Missing Authorization in Google Cloud Firebase Studio versions prior to 2026-04-15 on Google Cloud Platform allows an attacker to download other users' deployed source code and access sensitive data via unauthorized GCS URL signing requests. This vulnerability was patched on 15 A...
-
CVE-2026-15737 Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDK
PublishedMediumCVSS 5.7 EPSS 0.38%AWS Bedrock AgentCore Python SDK is an open-source Python library that provides client tools for building AI agents on the Amazon Bedrock AgentCore platform. Unintended logging of sensitive user content in the OpenTelemetry instrumentation in AWS Bedrock AgentCore Python SDK vers...
-
HighCVSS 8.4 EPSS 1.1%
OS command injection in the npm package loading component in AWS jsii-diff before 1.131.0 might allow context-dependent attackers to execute arbitrary commands via crafted package specifiers passed to the npm: source argument. To mitigate this issue, users should upgrade to jsii-...
-
MediumCVSS 5.8 EPSS 0.65%
Incorrect behavior order in the Gateway API listener-rule generation in Amazon AWS Load Balancer Controller before 3.4.2 might allow an authenticated remote user to intercept, spoof, or deny another namespace's gRPC traffic on a shared Gateway via a crafted HTTPRoute resource. To...
-
CriticalCVSS 9.2 EPSS 0.39%
AWS HealthLake MCP Server (awslabs.healthlake-mcp-server) is a Model Context Protocol server that enables AI assistants to interact with AWS HealthLake FHIR datastores. A server-side request forgery in the pagination handling component in AWS awslabs.healthlake-mcp-server before...
-
HighCVSS 8.8 EPSS 0.50%
Improper certificate validation in Azure Connected Machine Agent allows an unauthorized attacker to elevate privileges over an adjacent network.
-
HighCVSS 7.5 EPSS 1.2%
Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.