Critical · 1 source · latest 4h

CVE-2026-119085 - Template injection in the publishing component of Virtual Engineering Workbench

CRITICAL · VULNERABILITYCVE-2026-119085redteam/daily · 1 source

Severity: Critical
Highest CVSS: 9.4
Exploited: Not known
Sources: 1

What happened

Writing the summary… Our AI is reading all the sources now; it appears here in a few seconds.

From 1 source · Wrong?

What to do

Check whether you use the affected product, and install the vendor’s fix when it is available. Open your watchlist

General advice for this kind of story

Read the full story at the source

Vulnerabilities

CVE-2026-119085CVSS 9.4Improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual Engineering Workbench (VEW) could allow a remote authenticated third party to run arbitrary code with the permissions of the publishing Lambda's IAM role. This could allow access to da

Full story timeline · 2 updates

Who reported · 1 outlet

AWS Security Bulletins

Report a problem