AWS CloudAWS Systems Manager (SSM) Agent OS Command Injection Flaw CVE-2026-87911 Patched
AWS resolves a high-severity OS command injection flaw in AWS Systems Manager Agent (CVE-2026-87911) affecting multi-step Run Command document execution.
Topic
2 articles
CyberSecureToday covers SSM Agent across 2 articles published between 28 Sep 2026 and 14 Oct 2026.
The coverage includes 2 vulnerability advisories. 2 advisories are rated critical or high severity.
Stories on SSM Agent most often intersect with Amazon Web Services, AWS Systems Manager and OS Command Injection, with Technology, Cloud & SaaS the most affected sector. The most recent story, “AWS Systems Manager (SSM) Agent OS Command Injection Flaw CVE-2026-87911 Patched”, was published 14 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
AWS CloudAWS resolves a high-severity OS command injection flaw in AWS Systems Manager Agent (CVE-2026-87911) affecting multi-step Run Command document execution.
AWS CloudAWS resolves a critical SSRF vulnerability in amazon-ssm-agent where port forwarding denylist bypasses permit link-local IMDS temporary credential exfiltration.