CVE-2026-119085

Vendor

AWS

Product

virtual-engineering-workbench

CVSS v3.1

8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness

CWE-1336

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 31
   CVE NVD 19h ago

   Improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual Engineering Workbench (VEW) could…

   Improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual Engineering Workbench (VEW) could allow a remote authenticated third party to run arbitrary code with the…

   CVSS 8.8 CVE-2026-119085 AWS
2. 29
   AWS bulletin AWS 20h ago

   CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench

   Bulletin ID: 2026-162-AWS Publication Date: 11/02/2026 09:30 AM PST Description: Virtual Engineering Workbench (VEW) is an open-source platform where platform engineers define and publish development environments, and developers…

   CVE-2026-119085 Amazon Web Services