CVE-2026-119084

8.1 HIGHpublic exploit available

Published 2026-11-03 · Updated 2026-11-03

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Unsafe reflection in the connection parameter and credentials profile handling of Amazon Redshift JDBC Driver before 2.3.0 might allow an actor who can influence the JDBC connection URL or the AWS credentials profile to execute arbitrary code in the application context, provided a suitable class is available on the application classpath. To remediate this issue, users should upgrade to version 2.3.0 or later.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-470

Public exploit & PoC references

https://github.com/aws/amazon-redshift-jdbc-driver/releases/tag/v2.3.0
https://github.com/aws/amazon-redshift-jdbc-driver/security/advisories/GHSA-qrph-v96m-w2mv

All references

https://aws.amazon.com/security/security-bulletins/2026-168-aws/
https://github.com/aws/amazon-redshift-jdbc-driver/releases/tag/v2.3.0
https://github.com/aws/amazon-redshift-jdbc-driver/security/advisories/GHSA-qrph-v96m-w2mv

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

CRITICALCVE-2017-20285PoC
HIGHCVE-2026-100308PoC
HIGHCVE-2026-101292
HIGHCVE-2026-102094PoC
LOWCVE-2026-102580
HIGHCVE-2026-104629PoC
MEDIUMCVE-2026-105064
HIGHCVE-2026-105782PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.