CVE-2026-12530

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 6, 2026

Last Seen

October 6, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

AWS Lambda IAM Bypass Flaw CVE-2026-94384 Gains Attention63.0

A privilege-escalation vulnerability, CVE-2026-94384, was discovered in AWS's Lambda function, sfExecuteAWSService, which allows IAM principals to bypass permissions and execute unauthorized AWS API operations. AWS patched the flaw in June 2026, but the advisory was only published on September 22, l...