SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-86516

MEDIUM · CVSS 4.7 EPSS 0.23% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A vulnerability in the AWS GitHub OIDC Deployment Helper Script allows for improper privilege management due to a flaw in the function within the specified YAML file. This issue can be exploited remotely, potentially leading to unauthorized access or control over resources. Organizations utilizing the affected version of the mocknest-serverless should prioritize applying the provided patch to mitigate the risk.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-86516
Severity
MEDIUM
CVSS
4.7
EPSS
0.23%
GitHub

Original NVD Description

A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function of the file deployment/aws/shared/github-oidc-role.yaml of the component AWS GitHub OIDC Deployment Helper Script. Performing a manipulation results in improper privilege management. It is possible to initiate the attack remotely. The patch is named 6ab3147282d867c1993f995272750db091c2290b. Applying a patch is the recommended action to fix this issue.