CVE-2026-115417High· 7.5▾ TwilightMemory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial of service of the client application. To remediate this issue, users shou…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial of service of the client application.
To remediate this issue, users should upgrade to aws-c-mqtt 0.16.2 or later, or to an AWS Common Runtime or AWS IoT Device SDK release that bundles it.
aws-c-mqtt >= 0.9.1 < 0.16.2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-115419High· 8.1Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server
CVE-2026-115414High· 7.8OS command injection in the Terraform hook in AWS SAM CLI
CVE-2026-115416High· 7.7Incorrect authorization checks in Amazon Athena engine version 3 query processing
CVE-2026-112408High· 8.1Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()
CVE-2026-112407High· 8.8Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications
CVE-2026-10591High· 8.8Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths