https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T10:05:49.275704+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-240514 EUVD-2026-240514 2026-10-09T10:05:49.281434+00:00 EUVD-2026-240514 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41828 fkie_cve-2022-41828 2026-10-09T10:05:49.281467+00:00

In Amazon AWS Redshift JDBC Driver (aka amazon-redshift-jdbc-driver or redshift-jdbc42) before 2.1.0.8, the Object Factory does not check the class type when instantiating an object from a class name.

 https://cve.radiocsirt.org/vuln/ghsa-jc69-hjw2-fm86 GHSA-jc69-hjw2-fm86 — com.amazon.redshift:redshift-jdbc42 vulnerable to remote command execution 2026-10-09T10:05:49.281499+00:00

Affected: Maven: com.amazon.redshift:redshift-jdbc42

### Impact

A potential remote command execution issue exists within `redshift-jdbc42` versions 2.1.0.7 and below. When plugins are used with the driver, it instantiates plugin instances based on Java class names provided via the `sslhostnameverifier`, `socketFactory`, `sslfactory`, and `sslpasswordcallback` connection properties. In affected versions, the driver does not verify if a plugin class implements the expected interface before instantiatiaton. This can lead to loading of arbitrary Java classes, which a knowledgeable attacker with control over the JDBC URL can use to achieve remote code execution.

### Patches

This issue is patched within `redshift-jdbc-42` 2.1.0.8 and above.

### Workarounds

We advise customers using plugins to upgrade to `redshift-jdbc42` version 2.1.0.8 or above. There are no known workarounds for this issue.

### For more information

If you have any questions or comments about this advisory, please contact AWS Security at [aws-security@amazon.com](mailto:aws-security@amazon.com).

 https://cve.radiocsirt.org/vuln/gsd-2022-41828 gsd-2022-41828 2026-10-09T10:05:49.281534+00:00 gsd-2022-41828 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0412 WID-SEC-W-2023-0412 — IBM Security Guardium: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-09T10:05:49.281547+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM Security Guardium ausnutzen, um Sicherheitsvorkehrungen zu umgehen.