What is 2026-068-AWS?

2026-068-AWS is a security advisory published by AWS Security Bulletins. CVE-2026-18481 - Stored XSS in Participant URL Field leads to Account Takeover via Session Token Theft

Which CVE IDs does 2026-068-AWS cover?

2026-068-AWS covers the following CVE IDs: CVE-2026-18481. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

2026-068-AWS

CVE-2026-18481 - Stored XSS in Participant URL Field leads to Account Takeover via Session Token Theft

Vendor

AWS Security Bulletins

Published

July 31, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2026-18481 →

📋 Description

Bulletin ID: 2026-068-AWS Publication Date: 07/31/2026 11:00 AM PDT Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.

🔗 References (1)

advisoryhttps://aws.amazon.com/security/security-bulletins/rss/2026-068-aws/