CVE-2026-110812

Vendor

Amazon Web Services

CVSS

9.9

EPSS

0.004 (p30)

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 24
   CVE NVD 16d ago

   Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with…

   Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal…

   CVSS 9.9 CVE-2026-110812
2. 19
   AWS bulletin AWS 16d ago

   CVE-2026-110812 - Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune

   Bulletin ID: 2026-136-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/15/2026 09:30 AM PDT Description: Amazon Neptune is a fully managed graph database service. We identified CVE-2026-110812, an…

   Fix available CVE-2026-110812 Amazon Web Services