CVE-2026-119148Medium· 6.5▾ SunlitIncomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS KMS endpoint. To remediate this issue, users should rebuild any custom enclave image against aws-nitro-enclaves-s…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS KMS endpoint.
To remediate this issue, users should rebuild any custom enclave image against aws-nitro-enclaves-sdk-c 0.4.6.
aws-nitro-enclaves-sdk-c < 0.4.6Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-119116High· 7.8Use-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-c
CVE-2026-119083High· 7.8GluonTS arbitrary file write during archive extraction
CVE-2026-122266High· 8.7Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS
CVE-2026-122192High· 7.5Guest access to Firecracker process memory after a failed memory discard
CVE-2026-119084High· 8.1Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters
CVE-2026-119922High· 8.8Babelfish for PostgreSQL Privilege Escalation