Threats Tagged 'cve-2026-19359'
View all threats tagged with 'cve-2026-19359'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-19359'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-19359 is a medium severity security vulnerability in the nxp-auto-goldvip gvip software up to version 1.4.0. The issue affects the SitewiseCustomFunction within the Lambda Function Handler component, leading to improper access controls. This vulnerability can be exploited remotely. The problem stems from a known historical IAM permission misconfiguration that was addressed starting with version 1.13.0, with further permission updates in version 1.15.0. Users are advised to upgrade to version 1.15.0 or later to remediate the issue. Join the discussion | GCVE Database | 08/09/2026, 18:30:26 UTC Added: 08/10/2026, 15:40:39 UTC |
CVE-2026-19359 is a medium severity vulnerability in the nxp-auto-goldvip gvip product up to version 1.4.0. It involves improper access controls in the SitewiseCustomFunction of the Lambda Function Handler component, allowing remote attackers to exploit the issue. The vulnerability stems from a known historical IAM permission misconfiguration that was addressed starting with version 1.13.0 and improved in subsequent releases including 1.15.0. Users are advised to upgrade to version 1.15.0 or later to resolve the issue. The vendor has also requested updating or deprecating older releases in the AWS SAR repository. The product is a cloud service, so remediation is managed by the vendor. Join the discussion | CVE Database V5 | 08/09/2026, 16:30:08 UTC Added: 08/09/2026, 16:56:57 UTC |
Showing 1 to 2 of 2 results