CVSS

AWS quietly patched a privilege-escalation bug in one of its own sample serverless applications back in June 2026. Three months later, on September 22, it published the advisory. Then almost nothing happened until October 9 and 10, when security trackers and trade press picked up the story and pushed it into cloud security chatter worldwide….