目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

aws 厂商漏洞列表 / CVE 中文分析 134

aws 厂商相关 134 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

AWS 提供广泛的云计算服务，涵盖计算、存储及数据库等领域。其历史漏洞多涉及远程代码执行、权限绕过及信息泄露，部分源于配置错误或组件缺陷。值得关注的是，AWS 持续强化身份与访问管理（IAM）及加密机制，并定期发布安全最佳实践。尽管漏洞数量达 68 条，但其通过自动化补丁和合规认证（如 ISO 27001）维持较高安全基线，企业需重点关注配置合规性以防范风险。

Top products by aws: FreeRTOS-Plus-TCP tough Kiro IDE Research and Engineering Studio (RES) AWS-LC Amazon OpenSearch Service aws-cdk Opensearch sagemaker-python-sdk AWS Advanced JDBC Wrapper AWS Ops Wheel Firecracker aws-sdk-cpp strands-agents-tools Client VPN AWS Serverless Application Model Command Line Interface SageMaker Python SDK bedrock-agentcore projen awslabs.healthlake-mcp-server AWS Application Load Balancer res jsii Amazon CloudFront aws-healthomics-mcp-server MCP Gateway & Registry aws-smithy-http-server bedrock-agentcore 1.18.1 Amplify Codegen UI aws-smithy-json
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-89090 AWS SDK for Go v2 事件流解析服务拒绝 — AWS SDK for Go v2 CWE-248 5.9 Medium 2026-09-11
CVE-2026-18061 AWS Advanced JDBC Wrapper XXE漏洞 — AWS Advanced JDBC Wrapper CWE-611 5.9 Medium 2026-09-11
CVE-2026-89066 projen任务综合组件OS命令注入漏洞 — projen CWE-78 7.8 High 2026-09-11
CVE-2026-89065 projen 文件清单清理组件相对路径遍历漏洞 — projen CWE-23 7.1 High 2026-09-11
CVE-2026-89049 AWS Systems Manager Agent 会话管理器端口转发 SSRF 漏洞 — Amazon SSM Agent CWE-918 9.9 Critical 2026-09-10
CVE-2026-87913 AWS安全代理MCP服务器S3桶所有权验证缺失漏洞 — AWS Security Agent MCP server CWE-283 5.9 Medium 2026-09-10
CVE-2026-87912 AWS DevSecOps插件S3桶所有权验证缺失 — AWS Security Agent plugin CWE-283 5.9 Medium 2026-09-10
CVE-2026-87911 Amazon awslabs postgres-mcp-server 命令执行漏洞 — AWS Labs postgres MCP Server CWE-78 9.6 Critical 2026-09-09
CVE-2026-85788 awslabs mysql-mcp-server 输入验证不足漏洞 — AWS Labs MySQL MCP Server CWE-184 5.5 Medium 2026-09-09
CVE-2026-84942 OpenSearch Dashboards Vega表达式存储型XSS漏洞 — Amazon OpenSearch Service CWE-79 8.7 High 2026-09-08
CVE-2026-85781 Amazon EFS CSI Driver 权限许可和访问控制问题漏洞 — aws-efs-csi-driver CWE-283 8.7 High 2026-09-04
CVE-2026-85028 Amazon AWS F2 权限许可和访问控制问题漏洞 — aws-fpga CWE-379 7.8 High 2026-09-03
CVE-2026-85012 Amazon Blueprints 命令注入漏洞 — @amazon-codecatalyst/blueprints.blueprint CWE-78 8.0 High 2026-09-03
CVE-2026-83551 Amazon SageMaker Python SDK 加密问题漏洞 — sagemaker-python-sdk CWE-312 7.2 High 2026-09-01
CVE-2026-81838 Amazon Diagram-as-code 路径遍历漏洞 — diagram-as-code CWE-23 7.1 High 2026-08-27
CVE-2026-77811 OpenSearch Observability 跨站脚本漏洞 — Amazon OpenSearch Service CWE-79 8.7 High 2026-08-21
CVE-2026-77810 Amazon Athena Federated Query Neptune Connector 代码注入漏洞 — Athena Federated Query Neptune Connector CWE-95 9.9 Critical 2026-08-21
CVE-2026-18420 OpenSearch Dashboards 输入验证错误漏洞 — Amazon OpenSearch Service CWE-1321 8.8 High 2026-08-20
CVE-2026-75910 Amazon Athena Query Federation 权限许可和访问控制问题漏洞 — Athena Federated Query Clickhouse Connector deployment template CWE-266 6.5 Medium 2026-08-20
CVE-2026-18428 OpenSearch Direct Query SQL查询验证绕过漏洞 — Opensearch CWE-693 8.8 High 2026-08-13
CVE-2026-19643 Amazon AWS SDK for C++ 缓冲区错误漏洞 — aws-sdk-cpp CWE-125 5.3 Medium 2026-08-12
CVE-2026-19642 Amazon AWS SDK for C++ 缓冲区错误漏洞 — aws-sdk-cpp CWE-787 5.9 Medium 2026-08-12
CVE-2026-18952 OpenSearch Security Analytics plugin 服务端请求伪造漏洞 — Opensearch CWE-918 8.1 High 2026-08-12
CVE-2026-19311 OpenSearch Alerting 处理逻辑错误漏洞 — OpenSearch CWE-475 8.1 High 2026-08-12
CVE-2026-19111 AWS strands-agents-tools 授权问题漏洞 — strands-agents-tools CWE-639 8.1 High 2026-08-06
CVE-2026-18954 Amazon Open source MCP servers for AWS 授权问题漏洞 — documentdb-mcp-server CWE-863 5.5 Medium 2026-08-05
CVE-2026-18953 Amazon Open source MCP servers for AWS 路径遍历漏洞 — aws-transform-mcp-server CWE-22 8.6 High 2026-08-05
CVE-2026-18830 Amazon Bedrock AgentCore harness InvokeHarness API 软件供应链问题漏洞 — Amazon Bedrock AgentCore harness CWE-1287 8.1 High 2026-08-04
CVE-2026-18733 Amazon Strands Agents Tools 提示词注入漏洞 — strands-agents-tools CWE-1427 8.8 High 2026-08-03
CVE-2026-18654 Amazon aws-cli 加密问题漏洞 — aws-cli CWE-322 6.8 Medium 2026-08-03

本页汇总了 aws 厂商截至目前公开的全部 134 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。