Which CVE IDs does 2026-168-AWS cover?

2026-168-AWS covers the following CVE IDs: CVE-2026-119084. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

2026-168-AWS

CVE-2026-119084 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters

Vendor

AWS Security Bulletins

Published

November 3, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2026-119084 →

📋 Description

Bulletin ID: 2026-168-AWS Publication Date: 11/03/2026 13:00 PM PST Description: We identified CVE-2026-119084, an issue in Amazon Redshift JDBC Driver versions prior to 2.3.0. Under certain conditions, the driver could load and execute arbitrary classes when processing JDBC connection URL parameters or AWS credentials profile fields. Impacted versions: Amazon Redshift JDBC Driver
Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin. Read this article

🔗 References (1)

advisoryhttps://aws.amazon.com/security/security-bulletins/rss/2026-168-aws/