Threats tagged 'ghsa-w95p-h69m-853r'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.5	EPSS 0.2%	CVE-2026-18954Amazon AWS Labs DocumentDB MCP Server · Incorrect Authorization Medium5.5EPSS 0.2%2026-08-05GCVE DatabaseCVE-2026-18954 An authorization flaw in the aggregation pipeline tool of Amazon AWS Labs DocumentDB MCP Server versions before 1.0.12 allows an authenticated MCP client to perform unauthorized write operations by bypassing read-only mode enforcement. This vulnerability is fixed in version 1.0.12. EPSS 0.2%Report on CVE-2026-18954 Vulnerability CWE-863 #ghsa-w95p-h69m-853r	GCVE Database	2026-08-05

Page 1 of 1