Cloud Platforms vulnerabilities

Latest Cloud Platforms CVEs

Newest publication first · page 22 of 40 · showing the latest 1,000

1. CVE-2026-32096 Plunk has SSRF via unvalidated AWS SNS SubscriptionConfirmation in POST /webhooks/sns

   Published 2026-03-11

   High·CVSS 8.6 EPSS 0.31%

   Plunk is an open-source email platform built on top of AWS SES. Prior to 0.7.0, a Server-Side Request Forgery (SSRF) vulnerability existed in the SNS webhook handler. An unauthenticated attacker could send a crafted request that caused the server to make an arbitrary outbound HTT...

2. CVE-2026-32095 Plunk has Stored Cross-Site Scripting (XSS) via SVG File Upload

   Published 2026-03-11

   Medium·CVSS 5.4 EPSS 0.16%

   Plunk is an open-source email platform built on top of AWS SES. Prior to 0.7.1, Plunk's image upload endpoint accepted SVG files, which browsers treat as active documents capable of executing embedded JavaScript, creating a stored XSS vulnerability. This vulnerability is fixed in...

3. CVE-2026-31979 himmelblaud-tasks: local privilege escalation via /tmp symlink attack on Kerberos ccache

   Published 2026-03-11

   High·CVSS 7.8 EPSS 0.23%

   Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Prior to 3.1.0 and 2.3.8, the himmelblaud-tasks daemon, running as root, writes Kerberos cache files under /tmp/krb5cc_<uid> without symlink protections. Since commit 87a51ee, PrivateTmp is explicitl...

4. CVE-2026-31957 Himmelblau unset domain configuration can allow any-tenant authentication at first login for remote deployments

   Published 2026-03-11

   Critical·CVSS 10.0 EPSS 0.57%

   Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From 3.0.0 to before 3.1.0, if Himmelblau is deployed without a configured tenant domain in himmelblau.conf, authentication is not tenant-scoped. In this mode, Himmelblau can accept authentication at...

5. CVE-2026-26141 Hybrid Worker Extension (Arc‑enabled Windows VMs) Elevation of Privilege Vulnerability

   Published 2026-03-10

   High·CVSS 7.8 EPSS 0.34%

   Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally.

6. CVE-2026-26118 Azure MCP Server Tools Elevation of Privilege Vulnerability

   Published 2026-03-10

   High·CVSS 8.8 EPSS 1.1%

   Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.

7. CVE-2026-23665 Linux Azure Diagnostic extension (LAD) Elevation of Privilege Vulnerability

   Published 2026-03-10

   High·CVSS 7.8 EPSS 0.39%

   Heap-based buffer overflow in Azure Linux Virtual Machines allows an authorized attacker to elevate privileges locally.

8. CVE-2026-23662 Azure IoT Explorer Information Disclosure Vulnerability

   Published 2026-03-10

   High·CVSS 7.5 EPSS 0.82%

   Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.

9. CVE-2026-23661 Azure IoT Explorer Information Disclosure Vulnerability

   Published 2026-03-10

   High·CVSS 7.5 EPSS 0.79%

   Cleartext transmission of sensitive information in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.

10. CVE-2026-26148 Microsoft Azure AD SSH Login extension for Linux Elevation of Privilege Vulnerability

    Published 2026-03-10

    High·CVSS 8.1 EPSS 0.39%

    External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally.

11. CVE-2026-26121 Azure IOT Explorer Spoofing Vulnerability

    Published 2026-03-10

    High·CVSS 7.5 EPSS 1.2%

    Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network.

12. CVE-2026-23664 Azure IoT Explorer Information Disclosure Vulnerability

    Published 2026-03-10

    High·CVSS 7.5 EPSS 1.1%

    Improper restriction of communication channel to intended endpoints in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.

13. CVE-2026-23660 Windows Admin Center in Azure Portal Elevation of Privilege Vulnerability

    Published 2026-03-10

    High·CVSS 7.8 EPSS 0.35%

    Improper access control in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally.

14. CVE-2026-1776 Camaleon CMS AWS Uploader Authenticated Path Traversal Arbitrary File Read

    Published 2026-03-09

    Medium·CVSS 6.0 EPSS 0.83% PoC

    Camaleon CMS versions 2.4.5.0 through 2.9.0, prior to commit f54a77e, contain a path traversal vulnerability in the AWS S3 uploader implementation that allows authenticated users to read arbitrary files from the web server’s filesystem. The issue occurs in the download_private_fi...

15. CVE-2026-25604 Apache Airflow AWS Auth Manager - Host Header Injection Leading to SAML Authentication Bypass

    Published 2026-03-09

    Medium·CVSS 5.4 EPSS 0.40%

    In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified against the actual instance URL. This allowed to gain access to different instances with potentially different access controls by reusing SAML response from other i...

16. MAL-2026-1290 Malicious code in remjsonparse (PyPI)

    Published 2026-03-09

    Unknown

    -= Per source details. Do not edit below this line.=- Source: kam193 (e478d1e016f1d6d6d1cb4a9d23ac45449c22d99aa8e71c88d2f38fae8951f23f) During import, package starts advanced compromise actions: exfiltrates AWS and git credentials, commands history, security tools in use. After t...

17. GHSA-5r2p-pjr8-7fh7 SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality

    Published 2026-03-05

    High·CVSS 8.4

    Summary This advisory addresses the use of the search_hub() function within the SageMaker Python SDK's JumpStart search functionality. An actor with the ability to control query parameters passed to the search_hub() function could potentially provide malformed input that causes t...

18. GHSA-5wp8-q9mx-8jx8 zeptoclaw has Shell allowlist-blocklist bypass via command/argument injection and file name wildcards

    Published 2026-03-05

    Critical·CVSS 10.0

    Summary zeptoclaw implements a allowlist combined with a blocklist to prevent malicious shell commands in src/security/shell.rs. However, even in the Strict mode, attackers can completely bypass all the guards from allowlist and blocklist: to bypass the allowlist, command injecti...

19. GHSA-5whh-4q9j-7v28 aws-kms-tls-auth vulnerable to memory overallocation

    Published 2026-03-03

    Low·CVSS 3.7

    Summary aws-kms-tls-auth is an optional utility for s2n-tls that enables customers to use AWS KMS keys as part of the PSK extension field in a TLS 1.3 handshake. An issue exists in this library that can lead to overallocation of memory potentially resulting in a denial of service...

20. CVE-2026-3136 Google Cloud Build Comment Control Bypass

    Published 2026-03-03

    High·CVSS 8.6 EPSS 0.39%

    An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code in the build environment. This vulnerability was patched on 26 January 2026, and no customer action is needed.

21. GHSA-jq4x-98m3-ggq6 OpenClaw Canvas Path Traversal Information Disclosure Vulnerability

    Published 2026-03-02

    High·CVSS 7.1

    ZDI-CAN-29312: OpenClaw Canvas Path Traversal Information Disclosure Vulnerability -- ABSTRACT ------------------------------------- Trend Micro's Zero Day Initiative has identified a vulnerability affecting the following products: OpenClaw - OpenClaw -- VULNERABILITY DETAILS ---...

22. CVE-2026-3338 PKCS7_verify Signature Validation Bypass in AWS-LC

    Published 2026-03-02

    High·CVSS 8.7 EPSS 0.78%

    Improper signature validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass signature verification when processing PKCS7 objects with Authenticated Attributes. Customers of AWS services do not need to take action. Applications using AWS-LC should upgrade to...

23. CVE-2026-3337 Timing Side-Channel in AES-CCM Tag Verification in AWS-LC

    Published 2026-03-02

    High·CVSS 8.2 EPSS 1.1%

    Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis. The impacted implementations are through the EVP CIPHER API: EVP_aes_128_ccm, EVP_aes_192_ccm, and EVP_aes_256_cc...

24. CVE-2026-3336 PKCS7_verify Certificate Chain Validation Bypass in AWS-LC

    Published 2026-03-02

    High·CVSS 8.7 EPSS 0.74%

    Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain verification when processing PKCS7 objects with multiple signers, except the final signer. Customers of AWS services do not need to take action. Applications usi...

25. GHSA-747p-wmpv-9c78 AWS CLI: cli_history database does not restrict file permissions on Unix systems

    Published 2026-02-27

    Medium·CVSS 5.9

    Summary AWS CLI is a command line tool for interacting with AWS services. When the cli_history feature is enabled, the history database file is created with default permissions, potentially allowing other local users on a multi-user system to read the file. Impact When cli_histor...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.