CVE-2026-49204CWE-798

Hard-coded AWS Cognito Testing Accounts

Medium · published June 4, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
17.6
In the wild
Unconfirmed
What it is

Leftover debug modules contain fixed credentials for internal AWS Cognito test sandboxes, risking asset exploitation.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00266 · 17.6th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2026-06-04T06:35Z
EPSS history
Timeline
  • 04 JUN 06:35Z
    Hard-coded AWS Cognito Testing Accounts
    cvelistv5