Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: AWS Research and Engineering Studio (RES) — aws.amazon.com/security/security-bulletins/2026-014-aws Clear all filters
TI-2026-05007 CVE-2026-5709 · GHSA-6vq3-2fhj-j6wx

AWS Research and Engineering Studio (RES) FileBrowser Command Injection

Priority LOW 38

Unsanitized input in the FileBrowser API in AWS Research and Engineering Studio (RES) version 2024.10 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands on the cluster-manager EC2 i…

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.01106 Published 2026-04-06 No fix listed CWE-78
TI-2026-05006 CVE-2026-5708 · GHSA-fpff-pjfw-gfg7

Improper Control of User-Modifiable Attributes in RES CreateSession API

Priority MEDIUM 41

Unsanitized control of user-modifiable attributes in the session creation component in AWS Research and Engineering Studio (RES) prior to version 2026.03 could allow an authenticated remote user to escalate privileges, a…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00854 Published 2026-04-06 No fix listed CWE-915
TI-2026-05005 CVE-2026-5707 · GHSA-gxfh-rxpm-86pc

Command Injection via Virtual Desktop Session Name in AWS Research and Engineering Studio (RES)

Priority MEDIUM 42

Unsanitized input in an OS command in the virtual desktop session name handling in AWS Research and Engineering Studio (RES) version 2025.03 through 2025.12.01 might allow a remote authenticated actor to execute arbitrar…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01033 Published 2026-04-06 No fix listed CWE-78