sign in--:--:--UTC

CVE-2026-12957

☆ pin

CVSS

8.5

Reports

3

First seen

Jun 26, 2026

Last seen

Jul 9, 2026

Affected product

Amazon Q Developer

Associated actors

Gaslight ×1 Turla ×1

Recent reports

GhostApproval Symlink Flaws in AI Coding Assistants Enable Code Execution

The Hacker NewsJul 9, 2026 High

Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More

The Hacker NewsJun 29, 2026 High

Amazon Q Developer Vulnerability Allows Arbitrary Code Execution via Malicious MCP Configs

The Hacker NewsJun 26, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans