AWS Security Bulletins پنجشنبه ۲۱ آبان ۱۴۰۵ · ۲۲:۳۷

CVE-2026-127119 - Unverified ownership of the default EMR cluster log location in AWS SDK for pandas

Bulletin ID: 2026-181-AWS Publication Date: 11/12/2026 13:00 PM PST Description: We identified CVE-2026-127119, an issue in the EMR module of AWS SDK for pandas (awswrangler) from version 1.1.0 before 3.18.0. When a cluster is created without an explicit log location, the library uses a predictable default S3 bucket name for the cluster logs without verifying that the caller's account owns that bucket. A remote actor…

Vulnerabilities & Zero-Day Cloud Computing

Read the full article at AWS Security Bulletins Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

BleepingComputer پنجشنبه ۲۱ آبان ۱۴۰۵ · ۲۲:۴۲

Apache HTTP Server patches critical HTTP/2 remote code execution flaw

A critical vulnerability in the HTTP/2 module of Apache HTTP Server could be exploited by an unauthenticated attacker to obtain remote code execution (RCE). [...]

Vulnerabilities & Zero-Day

Source

Canadian Centre for Cyber Security پنجشنبه ۲۱ آبان ۱۴۰۵ · ۲۲:۳۸