Live · 98 sources · updated 14m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

CVE record · 2 sources

CVE-2026-115813

CVSS 5.8

Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to send…

Vendor
Amazon Web Services
Product
Docker Desktop / Engine, Python / PyPI packages
CVSS
5.8
EPSS
0.005 (p45)
Exposure class
Developer platform

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

  1. AWS bulletin AWS

    CVE-2026-115812 and CVE-2026-115813: Issue in Amazon Web Services Multi Model Server

    Bulletin ID: 2026-148-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/23/2026 10:30 AM PDT Description: Amazon Web Services Multi Model Server (MMS) is an open source tool for serving machine…

  2. CVE NVD

    Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to send…

    Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to send requests to internal network destinations via a crafted model URL. Multi Model…

    CVSS 5.8 No fix yet CVE-2026-115813 Amazon Web Services

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help