CVE-2026-15746

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

August 22, 2026

Last Seen

August 22, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

AWS Strands Agents Tools Exposed to Multiple CVEs in 23 Days72.0

Between July 15 and August 6, 2026, AWS Strands Agents Tools received four CVEs due to a design flaw exposing security-sensitive parameters as LLM-controllable inputs. The vulnerabilities include CVE-2026-15746 (credential exfiltration), CVE-2026-18394 (proxy hijacking), CVE-2026-18733 (arbitrary co...