Linuxsecurity Moderate DoS Vulnerabilities in Amazon CloudWatch Agent Fixed
Article Content
- •Two vulnerabilities in Amazon CloudWatch Agent fixed: CVE-2026-37236 and CVE-2026-41178.
- •CVE-2026-37236 allows HTTP method bypass, while CVE-2026-41178 enables DoS via oversized inputs.
- •Affected systems include SUSE Linux Enterprise and openSUSE versions; patches are available.
SUSE and openSUSE released updates for the Amazon CloudWatch Agent to address two vulnerabilities: CVE-2026-37236 and CVE-2026-41178. CVE-2026-37236 allows clients to bypass access control by overriding the HTTP method of a POST request, while CVE-2026-41178 permits denial-of-service (DoS) attacks via oversized inputs in baggage parsing. The vulnerabilities affect multiple SUSE Linux Enterprise and openSUSE versions, including Public Cloud Modules. The updates are rated as moderate in severity, and users are advised to apply patches using recommended installation methods. The CVEs were published on August 28, 2026, and June 4, 2026, respectively. Administrators should prioritize patching to mitigate potential risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track CVE-2026-37236 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…