Skip to content

CVE record · 2 sources

CVE-2026-112407

CVSS 8.8

Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated…

Vendor: Amazon Web Services
CVSS: 8.8

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

14

AWS bulletin AWS 11d ago

CVE-2026-112407 - Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications

Bulletin ID: 2026-141-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/20/2026 13:30 PM PDT Description: CICD-toolchain-for-serverless-applications is an AWS sample application that provisions a…

CVE-2026-112407 Amazon Web Services
10

CVE NVD 11d ago

Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated…

Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated users with push access to the application source repository to escalate…

CVSS 8.8 CVE-2026-112407