AWS

Everything NetSec Observer has reported about AWS: 2 stories, newest first. Part of our Vulnerabilities coverage.

Amazon Neptune CVE-2026-110812 Gremlin Deserialization Bug Patches RCE and Credential Theft

CVE-2026-110812 allows authenticated users with query permissions to execute arbitrary code and steal internal service credentials via unsafe data handling.

Oct 15, 2026

Vulnerabilities

Strands Agents SSRF CVE-2026-15746 leaks Elasticsearch credentials; rotate keys and update to 0.7.0

A server-side request forgery bug in the Strands Agents SDK allowed large language models to exfiltrate operator credentials to arbitrary hosts.

Oct 15, 2026