CVE-2026-85787 - An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server to modify data beyond the read-only scope

Friday, October 23, 2026 at 05:43 PM UTC·Source: AWS Security Bulletins

Updated: Friday, October 23, 2026 at 08:00 PM UTC

Executive Summary

Read this article

Analysis

Read this article

Indicators of Compromise (3)

CVE (1)

CVE-2026-85787

NVD MITRE CVE

URL (1)

https://aws.amazon.com/security/security-bulletins/2026-101-aws/

VirusTotal URLhaus

Domain (1)

aws.amazon.com

VirusTotal URLhaus

Source Attribution

Originally published by AWS Security Bulletins on Oct 23, 2026.

Related Threats

LOWVulnerabilityNEW

So Many AI Security Benchmarks, But None Tell the Whole Story

Measuring AI model security gets complex fast — a growing patchwork of benchmarks targets different variables in the equation, but none replace testing against your own code and workflows.

43m agoDark Reading

CRITICALVulnerabilityNEW

Experts temper emergency-level alarms over critical Brotli defect

The defect in a widely distributed open-source library provoked an emergency response, yet exploitation hasn’t been observed in the wild. The post Experts temper emergency-level alarms over critical Brotli defect appeared first on CyberScoop .

47m agoCyberScoop

MEDIUMVulnerability

CapitalOS raises $21.9m for money orchestration layer for B2B platforms

CapitalOS, a money orchestration layer for B2B platforms, has raised $21.9 million in Series A funding.

1h agoFinextra