CVE-2026-119115

Vendor

AWS

Product

aws-privateca-issuer

CVSS v3.1

8.5 AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N

Weakness

CWE-863

Exposure class

Developer platform, Cloud platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 31
   AWS bulletin AWS 2d ago

   CVE-2026-119115 - Incorrect authorization in issuer resolution in AWS Private CA Connector for Kubernetes

   Bulletin ID: 2026-156-AWS Publication Date: 10/29/2026 09:30 AM PDT Description: We are aware of CVE-2026-119115, an incorrect authorization issue in the issuer resolution logic. In affected versions, under certain conditions, an…

   CVE-2026-119115 Amazon Web Services Kubernetes
2. 21
   CVE NVD 2d ago

   Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-privateca-issuer) before v1.10.1 might allow…

   Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes (aws-privateca-issuer) before v1.10.1 might allow an authenticated remote user to obtain certificates, including subordinate CA…

   CVSS 8.5 CVE-2026-119115 AWS