Tag
critical
advisory
AWS Research and Engineering Studio OS Command Injection Vulnerability (CVE-2026-5707)
2 rules 1 TTP 1 CVEA remote authenticated attacker can execute arbitrary commands as root on the virtual desktop host by crafting a malicious session name in AWS Research and Engineering Studio (RES) versions 2025.03 through 2025.12.01 due to unsanitized input, leading to complete system compromise.
cve
command-injection
aws
res
2r
1t
1c
critical
advisory
AWS Research and Engineering Studio (RES) RCE via FileBrowser API Vulnerability
2 rules 1 TTP 1 CVECVE-2026-5709 is a critical vulnerability in AWS Research and Engineering Studio (RES) versions 2024.10 through 2025.12.01, allowing remote authenticated attackers to execute arbitrary commands on the cluster-manager EC2 instance through the FileBrowser API.
cve-2026-5709
rce
aws
res
2r
1t
1c