Threats Tagged 'cve-2026-85654'
View all threats tagged with 'cve-2026-85654'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-85654'
Click on any threat for detailed analysis and mitigation recommendations
A vulnerability in the CDK generator of Amazon awslabs.dynamodb-mcp-server before version 2.1.6 allows improper neutralization of special elements used in its template engine. This flaw could enable a context-dependent actor to execute arbitrary code on the host deploying the generated application by crafting table, index, or attribute names in a data model file. The vulnerability has a high severity score of 7.8 CVSS v3.1 and requires user interaction with low privileges. No official patch or remediation details are provided in the available data. Join the discussion | GCVE Database | 09/04/2026, 18:31:34 UTC Added: 09/05/2026, 14:25:18 UTC |
0 Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynamodb-mcp-server before 2.1.6 might allow a context-dependent actor to execute arbitrary code on the host that deploys the generated application via crafted table, index, or attribute names in a data model file. Join the discussion | CVE Database V5 | 09/04/2026, 17:05:09 UTC Added: 09/04/2026, 17:22:56 UTC |
Showing 1 to 2 of 2 results