CVE-2026-112408
Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 a
CVSS
8.1
Alta
EPSS
0.7%
p55
KEV
—
Exploit Today
16
0-100
Publicado: 21 de out. de 2026 · Última mod.: 30 de out. de 2026 · CWE-940
0.7%EPSS · 30 dias0.7%
2026-10-222026-11-05
Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via pre-creation of a predictably named S3 bucket that the SDK uses without ownership validation. To remediate this issue, users should upgrade to Amazon SageMaker Python SDK 3.10.0 (V3) or 2.257.3 (V2).
- aws.amazon.comhttps://aws.amazon.com/security/security-bulletins/2026-142-aws/
- github.comhttps://github.com/aws/sagemaker-python-sdk/releases/tag/v2.257.3
- github.comhttps://github.com/aws/sagemaker-python-sdk/releases/tag/v3.10.0
- github.comhttps://github.com/aws/sagemaker-python-sdk/security/advisories/GHSA-5rx8-8fr2-f855
- pypi.orghttps://pypi.org/project/sagemaker/2.257.3/
- pypi.orghttps://pypi.org/project/sagemaker/3.10.0/
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-768943.1 BAI9.5%
——3CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, the DataStore table UI in src/resources/datastore-table-ui.ts accepts window message events without validating event.origin and sends JSON-RPC messages through postMessage with a wildcard target origin. A frame that can reach the embedded document can inject fabricated fields or records, spoof pending ui/initialize responses, disrupt the MCP UI handshake, or receive outbound messages when the resource is embedded by an untrusted parent. Values are HTML escaped, so the demonstrated content injection is display spoofing rather than script execution, and exploitability depends on the host embedding model. This issue is fixed in version 0.4.112.2dCVE-2026-1195687.4 ALT34.9%
——10vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated attackers to hijack FTPS data connections by resuming their own TLS session ticket. Attackers sharing the victim's source IP can obtain a ticket via AUTH TLS, then connect to the victim's PASV port to steal downloads or inject upload data.6dCVE-2026-89409—19.2%
——6In Z-Wave SDK 8.1.1 and earlier (for 700/800 series devices) and 6.85.02 and earlier (for 500 series devices), missing checks in the ZWAVE_CMD_NODES_EXIST handler can result in nodes being removed from the network. These messages must come from a device that has already joined the network.14dCVE-2026-66279—15.9%
——5In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or otherwise break confidentiality.14dCVE-2026-1025525.9 MÉD14.3%
——4Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to insert a chosen address into the device's DNS cache via a forged DNS reply.
To remediate this issue, users should upgrade to version V4.4.2 and enable ipconfigDNS_CHECK_REPLY_SOURCE_IP.18dCVE-2026-1025517.7 ALT19.8%
——6Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router Advertisement.
To remediate this issue, users should upgrade to version V4.4.2.18d