Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL will allow a remote authenticated low-privilege actor to escalate privileges to those of another Amazon RDS user, including rds_superuser, via a crafted function created by the actor that runs when that user connects to the cluster through an affected wrapper. To remediate this issue, users should upgrade to AWS Advanced JDBC Wrapper version 4.0.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-06 | 2 | Disclosure2 |
| 2026-06-08 | 1 | Disclosure1 |
CVE-2026-11400 An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL will allow a remote authenticated low-privile… https://www.cve.org/CVERecord?id=CVE-2026-11400
Post summary
The text announces CVE-2026-11400, describing an untrusted search path vulnerability in AWS Aurora’s JDBC wrapper, with no mention of PoC, exploitation tools, or mitigation.
CVE-2026-11400 and CVE-2026-11401 - Privilege Escalation in Aurora PostgreSQL using AWS Advanced JDBC Wrapper, AWS Advanced Go Wrapper https://aws.amazon.com/security/security-bulletins/2026-039-aws/
Post summary
AWS has announced two new privilege‑escalation CVEs (CVE-2026-11400/11401) impacting Aurora PostgreSQL via its Advanced JDBC and Go wrappers, directing readers to a security bulletin for details.
CVE-2026-11400 Privilege Escalation in AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11400
Post summary
A new privilege escalation vulnerability (CVE-2026-11400) affecting AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL is disclosed, with details available on Vulmon.