CVE-2026-77810
Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector
CVSS score
9.9
EPSS probability
%0.6
Risk score
0.1
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.9
CVE-2026-110812
Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune
A
Patch verified
9.6
CVE-2026-87911
Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server
A
Patch verifiedEPSS %2
7.5
CVE-2026-94450
Potential denial of service when configured to send Retry packets in s2n-quic
A
Patch verifiedEPSS %2
9.0
CVE-2026-104019
OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio
A
Patch verifiedEPSS %1
8.7
CVE-2026-18428
SQL Query Validation Bypass in OpenSearch Direct Query
A
Patch verifiedEPSS %1
9.9
CVE-2026-89049
Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent
A
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-77810"