Vulnerabilities
Strands Agents Tools http_request Proxy Flaw CVE-2026-18394 Patched in 0.8.2
A flaw in the http_request tool allows credential theft via proxy manipulation. Version 0.8.2 patches the issue; rotate tokens if you used affected builds.
AWS
Everything Vuln Post has reported about AWS: 4 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Vulnerabilities
Linux KVM CVE-2026-99999 Critical Flaw Enables Guest VMs to Corrupt Host Memory in Versions 4.4-6.18
A critical kernel flaw in Linux networking code allows guest VMs to corrupt host memory, affecting KVM hypervisors running versions 4.4 through 6.18.
Vulnerabilities
AWS Load Balancer Controller 3.4.2 Fixes Misordered HTTP/gRPC Route Precedence CVE
Version 3.4.2 resolves CVE-2026-15738, which allowed users to intercept traffic via misordered HTTP and gRPC routes on shared gateways.
Vulnerabilities
Amazon S3 Encryption Client for .NET Patched for RSA Padding Downgrade Flaw CVE-2026-110310
Security teams must upgrade Amazon S3 Encryption Client for .NET to patch CVE-2026-110310, which allows attackers to decrypt data via legacy padding downgrades.