CVE Intelligence

Amazon Cloudfront vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Amazon Cloudfront: 1 record(s), with affected versions and fixes.
cpe:2.3:a:amazon:cloudfront

CVE-2026-13762 Critical · 9.8 CWE-444 Jun 29, 2026
Amazon CloudFront HTTP/2 Request Body Inspection Bypass with AWS WAF
Inconsistent interpretation of HTTP/2 requests in Amazon CloudFront with AWS WAF enabled might allow remote actors to bypass AWS WAF managed rule body inspection via crafted HTTP/2 requests that fragment the request body across frames so that only a partial body is inspected. This issue was remediated server-side. No customer action is required.