CVE-2026-18061

Vendor

Amazon Web Services

CVSS

5.9

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 14
   AWS bulletin AWS 7d ago

   CVE-2026-18061 - XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin

   CVE-2026-18061 Amazon Web Services
2. 8
   CVE NVD 11 Sep 2026

   Improper restriction of XML external entity references in the RemoteQueryCachePlugin in AWS Advanced JDBC Wrapper 3.3.0 through 4.2.0 might allow an…

   Improper restriction of XML external entity references in the RemoteQueryCachePlugin in AWS Advanced JDBC Wrapper 3.3.0 through 4.2.0 might allow an actor with write access to the shared cache infrastructure to disclose sensitive…

   CVSS 5.9 Fix available CVE-2026-18061