CompaniesAmazon Web ServicesMonthly reportsJuly 2026
Amazon Web Services in July 2026: incidents, uptime and changes
6incidents posted
0labelled major or critical
100%free of major/critical
94.61%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 0 min, incident time 40 h 6 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Minor 6
Incidents 6
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Increased Launch Template API Error Rates (us-east-1) | Minor | 2.1 h | resolved | 07-06 | |
| Elevated connectivity issues with a single Avalability zone (eu-central-1) | Minor | 2.2 h | resolved | 07-15 | |
| Increased 5xx Errors (global) | Minor | 3.6 h | resolved | 07-16 | |
| Inaccurate Estimated Billing Data (global) | Minor | 29 h | resolved | 07-17 | |
| Connectivity Issues (us-west-2) | Minor | 1.4 h | resolved | 07-24 | |
| Elevated Packet Loss (ap-south-1) | Minor | 1.4 h | resolved | 07-31 |
CVEs published
- CVE-2026-13769 Overly permissive File Permissions in AWS CLI (CVSS 5.5)
- CVE-2026-13760 OS Command Injection in aws-cdk-lib Docker Bundling (CVSS 7.3)
- CVE-2026-14265 RCE via Deserialization in AWS Advanced JDBC Wrapper (CVSS 7.5)
- CVE-2026-14471 Authenticated SQL injection in the metrics-service retention policy subsystem of mcp-gateway-registry (CVSS 8.1)
- CVE-2026-14904 RES Auth.GetUserPrivateKey Arbitrary File Read (CVSS 6.5)
- CVE-2026-15643 AWS HealthLake MCP Server SSRF via Pagination URL (CVSS 7.3)
- CVE-2026-15895 OS command injection in jsii-diff in AWS jsii (CVSS 7.8)
- CVE-2026-15737 Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDK (CVSS 5.7)
- CVE-2026-12283 SQL injection in Amazon Athena Synapse connector (CVSS 6.8)
- CVE-2026-15415 Path traversal and arbitrary file write in the workflow linters of aws-healthomics-mcp-server (CVSS 5.5)
- CVE-2026-15957 Uncontrolled recursion in smithy-rs generated JSON, CBOR, and XML deserializers allows unauthenticated remote denial of service via recursive shapes (CVSS 7.5)
- CVE-2026-16317 Silent Drop of TLS 1.3 Encrypted Records in s2n-tls (CVSS 6.5)
- CVE-2026-16584 AWS API MCP Server Security Policy Bypass via Startup Failure (CVSS 7.0)
- CVE-2026-16756 Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service (CVSS 7.5)
- CVE-2026-16796 Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_packages() (CVSS 7.3)
- CVE-2026-18245 Incomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-react (CVSS 9.0)
- CVE-2026-18140 Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers (CVSS 7.5)
- CVE-2026-18481 Stored XSS in Participant URL Field leads to Account Takeover via Session Token Theft (CVSS 7.3)
- CVE-2026-18394 Incorrect authorization in Strands Agents Tools http_request proxy credential exfiltration (CVSS 7.4)
Cite this
Amazon Web Services posted 6 status incidents in July 2026 (0 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- Amazon Web Services in July 2026
- Vendor
- Amazon Web Services
- Date
- URL
- https://rewindex.com/company/aws/2026/07