Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: AWS Ops Wheel — aws.amazon.com/security/security-bulletins/2026-018-aws Clear all filters
TI-2026-06057 CVE-2026-6912

Privilege Escalation via Self-Writable Cognito Custom Attribute in AWS Ops Wheel

Priority MEDIUM 40

Improperly controlled modification of dynamically-determined object attributes in the Cognito User Pool configuration in AWS Ops Wheel before PR #165 allows remote authenticated users to escalate to deployment admin priv…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00553 Published 2026-04-24 Fixed in 164 CWE-915
TI-2026-06056 CVE-2026-6911

Authentication Bypass via Missing JWT Signature Verification in AWS Ops Wheel

Priority MEDIUM 48

Missing JWT signature verification in AWS Ops Wheel allows unauthenticated attackers to forge JWT tokens and gain unintended administrative access to the application, including the ability to read, modify, and delete all…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00254 Published 2026-04-24 Fixed in 163 CWE-347