CVE-2026-22611— AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-22611
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
AWS SDK for .NET V4 adopted defense in depth enhancement for region parameter value
Source: NVD (National Vulnerability Database)
Vulnerability Description
AWS SDK for .NET works with Amazon Web Services to help build scalable solutions with Amazon S3, Amazon DynamoDB, Amazon Glacier, and more. From versions 4.0.0 to before 4.0.3.3, Customer applications could be configured to improperly route AWS API calls to non-existent or non-AWS hosts. This notification is related to the use of specific values for the region input field when calling AWS services. An actor with access to the environment in which the SDK is used could set the region input field to an invalid value. This issue has been patched in version 4.0.3.3.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
输入验证不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
AWS SDK for .NET 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
AWS SDK for .NET是Amazon Web Services开源的一个开发者套件。 AWS SDK for .NET 4.0.0版本至4.0.3.3之前版本存在输入验证错误漏洞，该漏洞源于区域输入字段可被设置为无效值，可能导致AWS API调用被错误路由。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| aws | aws-sdk-net | >= 4.0.0, < 4.0.3.3 | - |
II. Public POCs for CVE-2026-22611
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-22611
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same vendor: aws
- CVE-2026-7461
OS Command Injection in Amazon ECS Agent via FSx Windows Fil - CVE-2026-7426
Out-of-Bounds Write via Unsanitized Prefix Length in Router - CVE-2026-7425
Out-of-Bounds Read in Router Advertisement Option Parser in - CVE-2026-7424
Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Pl - CVE-2026-7423
Integer Underflow in ICMP Echo Reply Processing in FreeRTOS-
Same weakness: CWE-20
V. Comments for CVE-2026-22611
No comments yet