CVE ID :CVE-2026-119085 Published : Nov. 2, 2026, 6:18 p.m. | 45 minutes ago Description :Improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual Engineering Workbench (VEW) could allow a remote authenticated third party to run...

#Sicherheitslücke #Cloud

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-119085 - Template injection in the publishing component of awslabs Virtual Engineering Workbench

VERWANDTEARTIKEL

CVE-2026-119731 - Munshi Payment Bypass via Unauthenticated Webhook Endpoint

CVE-2026-105604 - Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3

CVE-2026-105603 - Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3

CVE-2026-111048 - FOSSBilling: Low-privileged staff can run JavaScript in administrators' browsers via stored XSS in support ticket notes

CVE-2026-105769 - kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts

CVE-2026-88811 - Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy