CVE-2026-8178
Last modified
CVE-2026-8178 is a critical-severity vulnerability rated 9.2/10 on the CVSS scale. An issue exists in Amazon Redshift JDBC Driver versions prior to 2.2.2. Under certain conditions, the driver could load and execute arbitrary classes when processing JDBC connection URL parameters. EPSS estimates a 0.57% chance of exploitation in the next 30 days.
Description
An issue exists in Amazon Redshift JDBC Driver versions prior to 2.2.2. Under certain conditions, the driver could load and execute arbitrary classes when processing JDBC connection URL parameters. An actor who can influence the connection URL could potentially execute code in the application context, provided a suitable class is available on the application's classpath. To mitigate this issue, users should upgrade to version 2.2.2 or later.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-8178?
How severe is CVE-2026-8178?
How do I fix CVE-2026-8178?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-8170The mv, cp, and rm file utilities exposed within the Extreme…8.7
- CVE-2026-8172The Simple Basic Contact Form WordPress plugin through 20250…7.1
- CVE-2026-8174Zohocorp Zoho Mail wordpress plugin is vulnerable to Cross-S…5.7
- CVE-2026-8175IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 …9.8
- CVE-2026-8176The LatePoint – Calendar Booking Plugin for Appointments and…7.5
- CVE-2026-8177XML::LibXML versions through 2.0210 for Perl read out-of-bou…7.5
- CVE-2026-8179IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 …8.8
- CVE-2026-8180IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 …7.5
- CVE-2026-8181The Burst Statistics – Privacy-Friendly WordPress Analytics …9.8
- CVE-2026-8182IBM Langflow OSS 1.0.0 through 1.10.3 installations allow an…8.8
- CVE-2026-8183IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3,…7.7
- CVE-2026-8185A security vulnerability has been detected in UGREEN CM933 1…6.3
Are you affected by CVE-2026-8178?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST