CompaniesAmazon Web ServicesMonthly reportsSeptember 2026
Amazon Web Services in September 2026: incidents, uptime and changes
2incidents posted
0labelled major or critical
100%free of major/critical
99.54%free of any incident
0price changes
0notable page changes
Vendor-reported outage time 0 min, incident time 3 h 15 min. Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours. Last 90 days.
By vendor label: Minor 2
Incidents 2
| Incident | Impact | Started | Duration | Status | Day |
|---|---|---|---|---|---|
| Increased API Error Rates (us-west-2) | Minor | 2.3 h | resolved | 09-03 | |
| Increased Error Rates (us-east-1) | Minor | 58 min | resolved | 09-21 |
CVEs published
- CVE-2026-83551 Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@remote pipeline path (CVSS 7.2)
- CVE-2026-85012 OS command injection in the Amazon CodeCatalyst blueprints SDK (CVSS 8.0)
- CVE-2026-85028 Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit (CVSS 7.8)
- CVE-2026-85781 Unverified access point ownership in Amazon EFS CSI Driver (CVSS 8.7)
- CVE-2026-85787 An incomplete list of disallowed inputs in the SQL validation component of Amazon awslabs postgres-mcp-server (CVSS 6.5)
- CVE-2026-84942 Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards (CVSS 8.7)
- CVE-2026-85788 Incomplete list of disallowed inputs in awslabs mysql-mcp-server (CVSS 5.5)
- CVE-2026-87911 Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server (CVSS 9.6)
- CVE-2026-87912 Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops (CVSS 5.9)
- CVE-2026-87913 Missing S3 bucket ownership verification in the AWS Security Agent MCP server (CVSS 5.9)
- CVE-2026-85228 Integer overflow in tensor buffer validation in Deep Java Library (CVSS 9.1)
- CVE-2026-89049 Server-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager Agent (CVSS 9.9)
- CVE-2026-89065 Relative path traversal in the generated file manifest cleanup component in projen (CVSS 7.1)
- CVE-2026-89066 OS command injection in the task synthesis component in projen (CVSS 7.8)
- CVE-2026-18061 Improper Restriction of XML External Entity References in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin (CVSS 5.9)
- CVE-2026-89090 Denial of service in the event stream header decoder in AWS SDK for Go v2 (CVSS 5.9)
- CVE-2026-89332 Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration (CVSS 5.5)
- CVE-2026-86830 Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center (CVSS 7.2)
- CVE-2026-86831 Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS (CVSS 8.7)
- CVE-2026-92943 Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python (CVSS 8.1)
- CVE-2026-94384 Missing Authorization in sfExecuteAWSService Lambda Dispatcher in Amazon Connect Salesforce Lambda (CVSS 8.1)
- CVE-2026-94450 Potential denial of service when configured to send Retry packets in s2n-quic (CVSS 7.5)
- CVE-2026-95985 Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces (CVSS 8.8)
- CVE-2026-96883 Type confusion in AWS pgcollection allows remote code execution (CVSS 8.8)
- CVE-2026-100308 GluonTS arbitrary command execution during model deserialization (CVSS 7.8)
Cite this
Amazon Web Services posted 2 status incidents in September 2026 (0 major or critical); 0 price changes and 0 notable page changes observed.
- Title
- Amazon Web Services in September 2026
- Vendor
- Amazon Web Services
- Date
- URL
- https://rewindex.com/company/aws/2026/09