CompaniesAmazon Web ServicesMonthly reportsAugust 2026
Amazon Web Services in August 2026: incidents, uptime and changes
3incidents posted
0labelled major or critical
100%free of major/critical
89.72%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 0 min, incident time 3.2 days. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Minor 3
Incidents 3
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Increased Packet loss (eu-central-1) | Minor | 3 d | resolved | 08-15 | |
| Increased Error Rates (eu-west-2) | Minor | 3.5 h | resolved | 08-19 | |
| Increased Error Rates (ap-northeast-1) | Minor | 38 min | resolved | 08-21 |
CVEs published
- CVE-2026-18655 Broker Credential and OAuth Token Disclosure in AWS Labs Amazon MQ MCP Server via Prompt Injection (CVSS 6.5)
- CVE-2026-18654 Disabled SSH host key verification in Amazon AWS CLI EMR helper commands (CVSS 6.8)
- CVE-2026-18733 Prompt injection bypasses shell tool consent gate in Strands Agents Tools (CVSS 8.8)
- CVE-2026-18830 Insufficient input validation in Amazon Bedrock AgentCore harness InvokeHarness API (CVSS 8.1)
- CVE-2026-18953 Improper limitation of a pathname to a restricted directory in aws-transform-mcp-server (CVSS 8.6)
- CVE-2026-18954 Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server (CVSS 5.5)
- CVE-2026-19111 Insecure direct object reference in Strands Agents Tools memory tool namespace isolation (CVSS 8.1)
- CVE-2026-19311 Missing Authorization in Execute Monitor API in OpenSearch Alerting Plugin (CVSS 8.1)
- CVE-2026-18952 Missing Input Validation in Threat Intel Feed Parser in OpenSearch Security Analytics Plugin (CVSS 8.1)
- CVE-2026-19642 Out-of-bounds write in the Base64 decoder in Amazon aws-sdk-cpp (CVSS 5.9)
- CVE-2026-19643 Out-of-bounds read in the Base64 decoder in Amazon aws-sdk-cpp on signed-char platforms (CVSS 5.3)
- CVE-2026-18428 SQL Query Validation Bypass in OpenSearch Direct Query (CVSS 8.8)
- CVE-2026-75897 Uncontrolled Resource Consumption in Capabilities Route in OpenSearch Dashboards (CVSS 7.5)
- CVE-2026-75910 Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment template (CVSS 6.5)
- CVE-2026-18420 RCE via Prototype Pollution in OpenSearch Dashboards (CVSS 8.8)
- CVE-2026-77810 Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector (CVSS 9.9)
- CVE-2026-77811 Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards (CVSS 8.7)
- CVE-2026-81838 Zip Slip Arbitrary File Write in AWS diagram-as-code (awsdac) (CVSS 7.1)
Cite this
Amazon Web Services posted 3 status incidents in August 2026 (0 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- Amazon Web Services in August 2026
- Vendor
- Amazon Web Services
- Date
- URL
- https://rewindex.com/company/aws/2026/08