Cevnitra
Cevnitra

Explore Cevnitra

Explore Cevnitra

Find the risk.
Focus the fix.

Bring your applications and infrastructure into focus.

Scan Now
Already have an account? Log in
All security reports
NVD security advisory

Security advisory for CVE-2026-115418

CVE-2026-115418

Full advisory details, affected packages, severity context, and original source.

Affected technology

CVE-2026-115418Affected product

Advisory overview

SQL injection in the database-query custom resource handlers in the Amazon Web Services (AWS) Cloud Development Kit (CDK) @aws-cdk/aws-redshift-alpha module before 2.274.0-alpha.0 could allow a third party who can influence construct property values to run SQL statements with Amazon Redshift superuser privileges, including granting access to all cluster users. The statements are reachable through crafted user names, comments, or passwords. To remediate this issue, users should upgrade to version 2.274.0-alpha.0 or later and review existing table grants to PUBLIC.

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account
SQL injection in the database-query custom resource handlers in the Amazon Web Services (AWS) Cloud Developmen | Security report | Cevnitra