PT-2026-136670

CVE-2026-119084

·

Published

2026-11-03

·

Updated

2026-11-03

Description by

CVSS 3.1
8.1
High
MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Unsafe reflection in the connection parameter and credentials profile handling of Amazon Redshift JDBC Driver before 2.3.0 might allow an actor who can influence the JDBC connection URL or the AWS credentials profile to execute arbitrary code in the application context, provided a suitable class is available on the application classpath.
To remediate this issue, users should upgrade to version 2.3.0 or later.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-470: Use of Externally-Controlled Input to Select Classes or Code (\'Unsafe Reflection\')
Related identifiers
CVE-2026-119084
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com