{"id":"CVE-2026-119084","aliases":[],"cve":{"records":[{"id":"CVE-2026-119084","source":"AMZN","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-29T13:17:51.275Z","published":"2026-11-03T21:05:30.963Z","modified":"2026-11-06T19:34:42.333Z"}],"publishers":[{"name":"AMZN","role":"CNA","organizationId":"ff89ba41-3aa1-4d27-914a-91399e9639e5","modified":"2026-11-03T21:12:15.970Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-06T19:34:42.333Z"}],"references":[{"url":"https://github.com/aws/amazon-redshift-jdbc-driver/releases/tag/v2.3.0","tags":["release-notes","patch"],"source":"AMZN"},{"url":"https://aws.amazon.com/security/security-bulletins/2026-168-aws/","tags":["vendor-advisory"],"source":"AMZN"},{"url":"https://github.com/aws/amazon-redshift-jdbc-driver/security/advisories/GHSA-qrph-v96m-w2mv","tags":["third-party-advisory"],"source":"AMZN"}],"weaknesses":[{"id":"CWE-470","description":"CWE-470 Use of Externally-Controlled input to select classes or code ('unsafe reflection')","source":"AMZN"}],"applicability":[{"source":"AMZN","statements":[{"operator":"OR","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aws:amazon-redshift-jdbc-driver:*:*:*:*:*:*:*:*","versionStartIncluding":"0","versionEndExcluding":"2.3.0"}]}]}]}],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-06T19:34:29.017952Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters","titleSource":"AMZN","descriptionSource":"AMZN","description":"Unsafe reflection in the connection parameter and credentials profile handling of Amazon Redshift JDBC Driver before 2.3.0 might allow an actor who can influence the JDBC connection URL or the AWS credentials profile to execute arbitrary code in the application context, provided a suitable class is available on the application classpath.\n\n\n\nTo remediate this issue, users should upgrade to version 2.3.0 or later.","score":9.2,"severity":"critical","published":"2026-11-03T21:05:30.963Z","modified":"2026-11-06T19:34:42.333Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"AWS","name":"amazon-redshift-jdbc-driver","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"2.3.0","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"AMZN","url":"https://www.cve.org/CVERecord?id=CVE-2026-119084"}],"remediation":[],"references":["https://github.com/aws/amazon-redshift-jdbc-driver/releases/tag/v2.3.0","https://aws.amazon.com/security/security-bulletins/2026-168-aws/","https://github.com/aws/amazon-redshift-jdbc-driver/security/advisories/GHSA-qrph-v96m-w2mv"],"sources":[{"name":"CVE","id":"CVE-2026-119084","modified":"2026-11-06T19:34:42.333Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-119084"}],"assessments":[{"source":"AMZN","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","score":8.1},{"source":"AMZN","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":9.2}],"sourceAffected":[],"observedAt":"2026-11-06T20:07:05.480Z","kev":{"status":"not-listed","checkedAt":"2026-11-07T23:20:33.336Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-06T20:45:34.761Z","attemptedAt":"2026-11-06T20:45:34.761Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-06T20:45:35.042Z","attemptedAt":"2026-11-06T20:45:35.042Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-06T20:45:34.225Z","attemptedAt":"2026-11-06T20:45:34.225Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-06T20:45:34.432Z","attemptedAt":"2026-11-06T20:45:34.432Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-116383","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-116383","modified":"Nov 6, 2026, 7:34:42 PM","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","checkedAt":"2026-11-06T20:45:34.225Z"},{"source":"FIRST EPSS","id":"CVE-2026-119084","url":"https://www.first.org/epss/","probability":0.00445,"percentile":0.38855,"date":"2026-11-06","checkedAt":"2026-11-06T20:45:34.432Z"},{"source":"NVD","id":"CVE-2026-119084","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119084","modified":"2026-11-06T20:17:14.277","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-11-06T20:45:34.761Z"},{"source":"NVD","id":"CVE-2026-119084","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119084","modified":"2026-11-06T20:17:14.277","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-06T20:45:34.761Z"}],"aiSummary":{"text":"Amazon Redshift JDBC Driver versions before 2.3.0 may allow an attacker with influence over the JDBC connection URL or AWS credentials profile to execute arbitrary code, given a suitable class on the application classpath. The weakness is due to unsafe reflection in connection parameter handling. An upgrade to version 2.3.0 or later is recommended.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-03T21:46:09.281Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-119084"}]}}