CVE-2026-18061 - XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin
Advanced Jdbc ยท 2026-10-25
Actions
Technical Details
| Affected Versions | >= 3.3.0, <= 4.2.0 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-18061 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update the AWS Advanced JDBC Wrapper to version 4.3.0 to address the XXE vulnerability (CVE-2026-18061) and ensure the RemoteQueryCachePlugin is either disabled or write access to the shared cache is restricted to trusted principals.
For Platform Teams
Deploy the updated AWS Advanced JDBC Wrapper version 4.3.0 to enhance security and prevent potential XXE attacks, ensuring the integrity and confidentiality of sensitive data.
For Executives
Implement the latest AWS Advanced JDBC Wrapper version 4.3.0 to mitigate the XXE vulnerability (CVE-2026-18061) and protect sensitive data from potential disclosure.