CVE-2026-119084

Vendor

AWS

Product

amazon-redshift-jdbc-driver

CVSS v3.1

8.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-470

Exposure class

Cloud platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 40
   AWS bulletin AWS 4h ago

   CVE-2026-119084 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters

   Bulletin ID: 2026-168-AWS Publication Date: 11/03/2026 13:00 PM PST Description: We identified CVE-2026-119084, an issue in Amazon Redshift JDBC Driver versions prior to 2.3.0. Under certain conditions, the driver could load and…

   CVE-2026-119084 Amazon Web Services
2. 35
   CVE NVD 3h ago

   Unsafe reflection in the connection parameter and credentials profile handling of Amazon Redshift JDBC Driver before 2.3.0 might allow an actor who…

   Unsafe reflection in the connection parameter and credentials profile handling of Amazon Redshift JDBC Driver before 2.3.0 might allow an actor who can influence the JDBC connection URL or the AWS credentials profile to execute…

   CVSS 8.1 Fix available CVE-2026-119084 AWS