# Amazon Web Services in April 2026: incidents, uptime and changes

> Amazon Web Services in April 2026: 1 incident on its status page (0 major or critical), 100% free of major or critical incidents (vendor-reported), 18 CVEs. From Rewindex’s archive of Amazon Web Services’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/aws/2026/04
Last updated: 2026-10-26T22:10:00Z

- Incidents posted: 1 (major/critical: 0) · Maintenance: 0
- By vendor impact label: minor 1
- Uptime (vendor-reported): 100% free of major/critical incidents, 99.90% free of any incident; outage time 0 min, incident time 39 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 18
- Previous month: [March 2026](https://rewindex.com/company/aws/2026/03.md) · Next: [May 2026](https://rewindex.com/company/aws/2026/05.md) · [All months](https://rewindex.com/company/aws/reports.md) · [Amazon Web Services](https://rewindex.com/company/aws.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Increased Connectivity Issues (eu-west-3)](https://rewindex.com/company/aws/incidents/eu-west-3-aws_ec2_operational_issue_fb70e_b77b1d343fd.md) | minor | 2026-04-27 11:27 UTC | 2026-04-27 12:05 UTC | 39 min | resolved |

## CVEs published

- [CVE-2026-5429](https://rewindex.com/cve/CVE-2026-5429.md) Kiro IDE Webview Cross-Site Scripting via Workspace Color Theme (CVSS 7.8), published 2026-04-02
- [CVE-2026-5707](https://rewindex.com/cve/CVE-2026-5707.md) Command Injection via Virtual Desktop Session Name in AWS Research and Engineering Studio (RES) (CVSS 8.8), published 2026-04-06
- [CVE-2026-5708](https://rewindex.com/cve/CVE-2026-5708.md) Improper Control of User-Modifiable Attributes in RES CreateSession API (CVSS 8.8), published 2026-04-06
- [CVE-2026-5709](https://rewindex.com/cve/CVE-2026-5709.md) AWS Research and Engineering Studio (RES) FileBrowser Command Injection (CVSS 8.8), published 2026-04-06
- [CVE-2026-5747](https://rewindex.com/cve/CVE-2026-5747.md) Out-of-bounds Write in Firecracker virtio-pci Transport (CVSS 7.5), published 2026-04-07
- [CVE-2026-6550](https://rewindex.com/cve/CVE-2026-6550.md) Key commitment policy bypass via shared key cache in AWS Encryption SDK for Python (CVSS 4.7), published 2026-04-20
- [CVE-2026-6911](https://rewindex.com/cve/CVE-2026-6911.md) Authentication Bypass via Missing JWT Signature Verification in AWS Ops Wheel (CVSS 9.8), published 2026-04-24
- [CVE-2026-6912](https://rewindex.com/cve/CVE-2026-6912.md) Privilege Escalation via Self-Writable Cognito Custom Attribute in AWS Ops Wheel (CVSS 8.8), published 2026-04-24
- [CVE-2026-6966](https://rewindex.com/cve/CVE-2026-6966.md) Signature Threshold Bypass in awslabs/tough Delegated Roles (CVSS 5.3), published 2026-04-24
- [CVE-2026-6967](https://rewindex.com/cve/CVE-2026-6967.md) Missing Delegated Metadata Validation in awslabs/tough (CVSS 5.9), published 2026-04-24
- [CVE-2026-6968](https://rewindex.com/cve/CVE-2026-6968.md) Multiple Path Traversal Variants in awslabs/tough (CVSS 5.9), published 2026-04-24
- [CVE-2026-7191](https://rewindex.com/cve/CVE-2026-7191.md) Arbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWS (CVSS 7.2), published 2026-04-27
- [CVE-2026-7422](https://rewindex.com/cve/CVE-2026-7422.md) MAC Address Validation Bypass in FreeRTOS-Plus-TCP IPv4 and IPv6 Packet Processing (CVSS 6.5), published 2026-04-29
- [CVE-2026-7423](https://rewindex.com/cve/CVE-2026-7423.md) Integer Underflow in ICMP Echo Reply Processing in FreeRTOS-Plus-TCP (CVSS 5.3), published 2026-04-29
- [CVE-2026-7424](https://rewindex.com/cve/CVE-2026-7424.md) Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP (CVSS 8.1), published 2026-04-29
- [CVE-2026-7425](https://rewindex.com/cve/CVE-2026-7425.md) Out-of-Bounds Read in Router Advertisement Option Parser in FreeRTOS-Plus-TCP (CVSS 6.5), published 2026-04-29
- [CVE-2026-7426](https://rewindex.com/cve/CVE-2026-7426.md) Out-of-Bounds Write via Unsanitized Prefix Length in Router Advertisement Processing in FreeRTOS-Plus-TCP (CVSS 8.1), published 2026-04-29
- [CVE-2026-7461](https://rewindex.com/cve/CVE-2026-7461.md) OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials (CVSS 7.2), published 2026-04-30

## Cite this

Amazon Web Services posted 1 status incident in April 2026 (0 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/aws/2026/04
- Citation: Amazon Web Services, “Amazon Web Services in April 2026” (2026-04-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/aws/2026/04 (CC BY 4.0).
- Markdown link: `[Amazon Web Services: Amazon Web Services in April 2026 (2026-04-01)](https://rewindex.com/company/aws/2026/04)`


---
Canonical: https://rewindex.com/company/aws/2026/04 · Markdown: https://rewindex.com/company/aws/2026/04.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T13:14:06.410Z