CompaniesAmazon Web ServicesMonthly reportsApril 2026
Amazon Web Services in April 2026: incidents, uptime and changes
1incidents posted
0labelled major or critical
100%free of major/critical
99.90%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 0 min, incident time 39 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Minor 1
Incidents 1
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Increased Connectivity Issues (eu-west-3) | Minor | 39 min | resolved | 04-27 |
CVEs published
- CVE-2026-5429 Kiro IDE Webview Cross-Site Scripting via Workspace Color Theme (CVSS 7.8)
- CVE-2026-5707 Command Injection via Virtual Desktop Session Name in AWS Research and Engineering Studio (RES) (CVSS 8.8)
- CVE-2026-5708 Improper Control of User-Modifiable Attributes in RES CreateSession API (CVSS 8.8)
- CVE-2026-5709 AWS Research and Engineering Studio (RES) FileBrowser Command Injection (CVSS 8.8)
- CVE-2026-5747 Out-of-bounds Write in Firecracker virtio-pci Transport (CVSS 7.5)
- CVE-2026-6550 Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python (CVSS 4.7)
- CVE-2026-6911 Authentication Bypass via Missing JWT Signature Verification in AWS Ops Wheel (CVSS 9.8)
- CVE-2026-6912 Privilege Escalation via Self-Writable Cognito Custom Attribute in AWS Ops Wheel (CVSS 8.8)
- CVE-2026-6966 Signature Threshold Bypass in awslabs/tough Delegated Roles (CVSS 5.3)
- CVE-2026-6967 Missing Delegated Metadata Validation in awslabs/tough (CVSS 5.9)
- CVE-2026-6968 Multiple Path Traversal Variants in awslabs/tough (CVSS 5.9)
- CVE-2026-7191 Arbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWS (CVSS 7.2)
- CVE-2026-7422 MAC Address Validation Bypass in FreeRTOS-Plus-TCP IPv4 and IPv6 Packet Processing (CVSS 6.5)
- CVE-2026-7423 Integer Underflow in ICMP Echo Reply Processing in FreeRTOS-Plus-TCP (CVSS 5.3)
- CVE-2026-7424 Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP (CVSS 8.1)
- CVE-2026-7425 Out-of-Bounds Read in Router Advertisement Option Parser in FreeRTOS-Plus-TCP (CVSS 6.5)
- CVE-2026-7426 Out-of-Bounds Write via Unsanitized Prefix Length in Router Advertisement Processing in FreeRTOS-Plus-TCP (CVSS 8.1)
- CVE-2026-7461 OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials (CVSS 7.2)
Cite this
Amazon Web Services posted 1 status incident in April 2026 (0 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- Amazon Web Services in April 2026
- Vendor
- Amazon Web Services
- Date
- URL
- https://rewindex.com/company/aws/2026/04