What’s Vulnerable › Products

AWS Ops Wheel vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your AWS Ops Wheel version is affected

Latest AWS Ops Wheel vulnerabilities

• CVE-2026-18481 — Stored XSS in Participant URL Field leads to Account Takeover via Session Token Theft (CVSS 7.3)
• CVE-2026-6912 — Privilege Escalation via Self-Writable Cognito Custom Attribute in AWS Ops Wheel (CVSS 8.8)
• CVE-2026-6911 — Authentication Bypass via Missing JWT Signature Verification in AWS Ops Wheel (CVSS 9.8)