Skip to main content
عربي
logo

NCSC-VD-2609-003-04

Severity Level: Critical

Reference No.: NCSC-VD-2609-003-04

AWS

Description

CVE-2026-89049: A server-side request forgery vulnerability allows an authenticated remote attacker to bypass destination restrictions and access internal endpoints, potentially obtaining temporary IAM credentials and using the associated permissions.

Vulnerabilities

  • CVE-2026-89049

    A server-side request forgery vulnerability allows an authenticated remote attacker to bypass destination restrictions and access internal endpoints, potentially obtaining temporary IAM credentials and using the associated permissions.

References