CVE-2026-115418

Vendor

AWS

Product

aws-cdk/aws-redshift-alpha

CVSS v3.1

7.3 AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS

0.002 (p7)

Weakness

CWE-89

Exposure class

Cloud platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 28
   CVE NVD 5d ago

   SQL injection in the database-query custom resource handlers in the Amazon Web Services (AWS) Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alpha…

   SQL injection in the database-query custom resource handlers in the Amazon Web Services (AWS) Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alpha module before 2.274.0-alpha.0 could allow a third party who can influence…

   CVSS 7.3 Fix available CVE-2026-115418 AWS
2. 27
   AWS bulletin AWS 5d ago

   CVE-2026-115418 - SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS)

   Bulletin ID: 2026-151-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/26/2026 09:30 AM PDT Description: The AWS Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alpha module provides experimental…

   CVE-2026-115418 Amazon Web Services