Amazon Research And Engineering Studio vulnerabilities

3 CVEs affecting Amazon Research And Engineering Studio, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-5709, published 2026-04-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-5709, published 2026-04-06. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. Unsanitized input in the FileBrowser API in AWS Research and Engineering Studio (RES) version 2024.10 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands on the…
CVE-2026-5707, published 2026-04-06. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. Unsanitized input in an OS command in the virtual desktop session name handling in AWS Research and Engineering Studio (RES) version 2025.03 through 2025.12.01 might allow a remote authenticated…
CVE-2026-5708, published 2026-04-06. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Unsanitized control of user-modifiable attributes in the session creation component in AWS Research and Engineering Studio (RES) prior to version 2026.03 could allow an authenticated remote user to…