https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 03:30:23 +0000 https://cve.radiocsirt.org/vuln/cve-2026-11400 <p><strong>Affected:</strong> AWS Advanced JDBC Wrapper</p> <p>An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL will allow a remote authenticated low-privilege actor to escalate privileges to those of another Amazon RDS user, including rds_superuser, via a crafted function created by the actor that runs when that user connects to the cluster through an affected wrapper.</p> <p>To remediate this issue, users should upgrade to AWS Advanced JDBC Wrapper version 4.0.1.</p> <p><strong>Affected:</strong> AWS Advanced JDBC Wrapper</p> <p>An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL will allow a remote authenticated low-privilege actor to escalate privileges to those of another Amazon RDS user, including rds_superuser, via a crafted function created by the actor that runs when that user connects to the cluster through an affected wrapper.</p> <p>To remediate this issue, users should upgrade to AWS Advanced JDBC Wrapper version 4.0.1.</p> https://cve.radiocsirt.org/vuln/cve-2026-11400