Threats tagged 'ghsa-p9pf-mc7w-9q4h'

CVE-2026-19359 is a medium severity security vulnerability in the nxp-auto-goldvip gvip software up to version 1.4.0. The issue affects the SitewiseCustomFunction within the Lambda Function Handler component, leading to improper access controls. This vulnerability can be exploited remotely. The problem stems from a known historical IAM permission misconfiguration that was addressed starting with version 1.13.0, with further permission updates in version 1.15.0. Users are advised to upgrade to version 1.15.0 or later to remediate the issue.