Reported by 1 outlet
Amazon Redshift JDBC Driver RCE CVE-2026-8178 — Unsafe Class Loading via Connection URL
hot0.0
Why this score
- Breadth
- 0.50 / 2.0 · 1 source
- Authority
- 1.00 / 2.0 · best outlet weight
- Severity
- 3.70 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.00 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Amazon Redshift JDBC Driver RCE CVE-2026-8178 — Unsafe Class Loading via Connection URL
cyberpress.org · 151d ago · May 16th, 2026
A high-severity remote code execution vulnerability in the Amazon Redshift JDBC Driver (versions before 2.2.2) allows attackers who can influence JDBC connection URLs to trigger arbitrary class loading and code execution within the JVM. The flaw requires no authentication or user interaction, making it particularly dangerous in cloud-native environments where connection strings are dynamically constructed. Patched in version 2.2.2. Organizations should audit how JDBC URLs are built and block untrusted input from influencing connection parameters.