Search threats, CVEs… ⌘K
Back to vendor advisories
AWS Security BulletinsCVE-2026-119084

CVE-2026-119084 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection Parameters

Severity not listed 1 CVE Published Nov 3, 2026 at 9:32 PM UTC

Summary

Bulletin ID: 2026-168-AWS

Publication Date: 11/03/2026 13:00 PM PST

Description:

We identified CVE-2026-119084, an issue in Amazon Redshift JDBC Driver versions prior to 2.3.0. Under certain conditions, the driver could load and execute arbitrary classes when processing JDBC connection URL parameters or AWS credentials profile fields.

Impacted versions: Amazon Redshift JDBC Driver < 2.3.0

Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.

Read this article

Products covered

A separate affected-products list was not included in the collected bulletin.

Remediation

Separate remediation guidance was not included in the collected bulletin.

CVEs in this advisory 1

CVE-2026-119084

Updates

  1. Published by AWS

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.

Keep investigating
See every advisory from this vendor