AWS Amazon Neptune Engine vulnerabilities

Latest AWS Amazon Neptune Engine CVEs

Newest publication first

1. CVE-2026-110812 Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune

   Published 2026-10-15

   Critical·CVSS 9.4 EPSS 0.37%

   Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials. To remediate this issue, users not...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.