cbcvebase.

Aws Amazon Cloudfront vulnerabilities

1 known vulnerability affecting aws/amazon_cloudfront.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-13762P2CRITICALCVSS 9.8v02026-06-29
CVE-2026-13762 [CRITICAL] CWE-444 CVE-2026-13762: Inconsistent interpretation of HTTP/2 requests in Amazon CloudFront with AWS WAF enabled might allow Inconsistent interpretation of HTTP/2 requests in Amazon CloudFront with AWS WAF enabled might allow remote actors to bypass AWS WAF managed rule body inspection via crafted HTTP/2 requests that fragment the request body across frames so that only a partial body is inspected. This issue was remediated server-side. No customer action is required.
nvd
Aws Amazon Cloudfront vulnerabilities | cvebase