# Amazon Web Services in July 2026: incidents, uptime and changes

> Amazon Web Services in July 2026: 6 incidents on its status page (0 major or critical), 100% free of major or critical incidents (vendor-reported), 19 CVEs. From Rewindex’s archive of Amazon Web Services’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/aws/2026/07
Last updated: 2026-10-25T20:10:00Z

- Incidents posted: 6 (major/critical: 0) · Maintenance: 0
- By vendor impact label: minor 6
- Uptime (vendor-reported): 100% free of major/critical incidents, 94.61% free of any incident; outage time 0 min, incident time 40 h 6 min
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 0 · CVEs: 19
- Previous month: [June 2026](https://rewindex.com/company/aws/2026/06.md) · Next: [August 2026](https://rewindex.com/company/aws/2026/08.md) · [All months](https://rewindex.com/company/aws/reports.md) · [Amazon Web Services](https://rewindex.com/company/aws.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Increased Launch Template API Error Rates (us-east-1)](https://rewindex.com/company/aws/incidents/us-east-1-aws_ec2_operational_issue_5269e_f1b7af74706.md) | minor | 2026-07-06 12:45 UTC | 2026-07-06 14:53 UTC | 2.1 h | resolved |
| [Elevated connectivity issues with a single Avalability zone (eu-central-1)](https://rewindex.com/company/aws/incidents/eu-central-1-aws_multiple_services_operational_issue_25dbe_2ef1d48b613.md) | minor | 2026-07-15 23:11 UTC | 2026-07-16 01:24 UTC | 2.2 h | resolved |
| [Increased 5xx Errors (global)](https://rewindex.com/company/aws/incidents/global-aws_cloudfront_operational_issue_edf4c_83808542a4e.md) | minor | 2026-07-16 08:44 UTC | 2026-07-16 12:21 UTC | 3.6 h | resolved |
| [Inaccurate Estimated Billing Data (global)](https://rewindex.com/company/aws/incidents/global-aws_billing_operational_issue_47b68_bacbd91434f.md) | minor | 2026-07-17 08:33 UTC | 2026-07-18 13:57 UTC | 29 h | resolved |
| [Connectivity Issues (us-west-2)](https://rewindex.com/company/aws/incidents/us-west-2-aws_multiple_services_operational_issue_83a36_24c89b493a6.md) | minor | 2026-07-24 11:40 UTC | 2026-07-24 13:01 UTC | 1.4 h | resolved |
| [Elevated Packet Loss (ap-south-1)](https://rewindex.com/company/aws/incidents/ap-south-1-aws_directconnect_operational_issue_00b73_1c6411f1489.md) | minor | 2026-07-31 17:33 UTC | 2026-07-31 18:54 UTC | 1.4 h | resolved |

## CVEs published

- [CVE-2026-13769](https://rewindex.com/cve/CVE-2026-13769.md) Overly permissive File Permissions in AWS CLI (CVSS 5.5), published 2026-07-01
- [CVE-2026-13760](https://rewindex.com/cve/CVE-2026-13760.md) OS Command Injection in aws-cdk-lib Docker Bundling (CVSS 7.3), published 2026-07-01
- [CVE-2026-14265](https://rewindex.com/cve/CVE-2026-14265.md) RCE via Deserialization in AWS Advanced JDBC Wrapper (CVSS 7.5), published 2026-07-01
- [CVE-2026-14471](https://rewindex.com/cve/CVE-2026-14471.md) Authenticated SQL injection in the metrics-service retention policy subsystem of mcp-gateway-registry (CVSS 8.1), published 2026-07-06
- [CVE-2026-14904](https://rewindex.com/cve/CVE-2026-14904.md) RES Auth.GetUserPrivateKey Arbitrary File Read (CVSS 6.5), published 2026-07-07
- [CVE-2026-15643](https://rewindex.com/cve/CVE-2026-15643.md) AWS HealthLake MCP Server SSRF via Pagination URL (CVSS 7.3), published 2026-07-14
- [CVE-2026-15895](https://rewindex.com/cve/CVE-2026-15895.md) OS command injection in jsii-diff in AWS jsii (CVSS 7.8), published 2026-07-15
- [CVE-2026-15737](https://rewindex.com/cve/CVE-2026-15737.md) Sensitive content disclosure via OpenTelemetry spans in AgentCore Python SDK (CVSS 5.7), published 2026-07-16
- [CVE-2026-12283](https://rewindex.com/cve/CVE-2026-12283.md) SQL injection in Amazon Athena Synapse connector (CVSS 6.8), published 2026-07-17
- [CVE-2026-15415](https://rewindex.com/cve/CVE-2026-15415.md) Path traversal and arbitrary file write in the workflow linters of aws-healthomics-mcp-server (CVSS 5.5), published 2026-07-17
- [CVE-2026-15957](https://rewindex.com/cve/CVE-2026-15957.md) Uncontrolled recursion in smithy-rs generated JSON, CBOR, and XML deserializers allows unauthenticated remote denial of service via recursive shapes (CVSS 7.5), published 2026-07-21
- [CVE-2026-16317](https://rewindex.com/cve/CVE-2026-16317.md) Silent Drop of TLS 1.3 Encrypted Records in s2n-tls (CVSS 6.5), published 2026-07-21
- [CVE-2026-16584](https://rewindex.com/cve/CVE-2026-16584.md) AWS API MCP Server Security Policy Bypass via Startup Failure (CVSS 7.0), published 2026-07-23
- [CVE-2026-16756](https://rewindex.com/cve/CVE-2026-16756.md) Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service (CVSS 7.5), published 2026-07-23
- [CVE-2026-16796](https://rewindex.com/cve/CVE-2026-16796.md) Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install\_packages() (CVSS 7.3), published 2026-07-23
- [CVE-2026-18245](https://rewindex.com/cve/CVE-2026-18245.md) Incomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-react (CVSS 9.0), published 2026-07-30
- [CVE-2026-18140](https://rewindex.com/cve/CVE-2026-18140.md) Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers (CVSS 7.5), published 2026-07-30
- [CVE-2026-18481](https://rewindex.com/cve/CVE-2026-18481.md) Stored XSS in Participant URL Field leads to Account Takeover via Session Token Theft (CVSS 7.3), published 2026-07-31
- [CVE-2026-18394](https://rewindex.com/cve/CVE-2026-18394.md) Incorrect authorization in Strands Agents Tools http\_request proxy credential exfiltration (CVSS 7.4), published 2026-07-31

## Cite this

Amazon Web Services posted 6 status incidents in July 2026 (0 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/aws/2026/07
- Citation: Amazon Web Services, “Amazon Web Services in July 2026” (2026-07-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/aws/2026/07 (CC BY 4.0).
- Markdown link: `[Amazon Web Services: Amazon Web Services in July 2026 (2026-07-01)](https://rewindex.com/company/aws/2026/07)`


---
Canonical: https://rewindex.com/company/aws/2026/07 · Markdown: https://rewindex.com/company/aws/2026/07.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T11:04:55.089Z