CVE WATCH / VULNERABILITY DETAIL
CVE-2026-110812
CRITICALCVSS 9.9NVD feed
Published 15 October 2026 · tracked since 16 October 2026
Description
Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials. To remediate this issue, users not enrolled in auto
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-111138 MEDIUM 5.5
- CVE-2026-110874 MEDIUM 6.6
- CVE-2026-110878 MEDIUM 5.4
- CVE-2026-109924 MEDIUM 5.9
- CVE-2026-109932 MEDIUM 5.9
- CVE-2026-109829 HIGH 7.4
- CVE-2026-109841 MEDIUM 5.9
- CVE-2026-109869 HIGH 7.5
- CVE-2026-109383 HIGH 7.4
- CVE-2026-104150