[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2026-13762":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":25,"cwes":26,"cpes":28,"technologies":30,"references":32,"score":34,"epss_score":35,"epss_percentile":36,"is_kev":37,"cisa_kev_date_added":38,"cisa_kev_due_date":38,"cisa_ssvc":39,"attack_mappings":49,"exploits":56},361910,"CVE-2026-13762","EUVD-2026-40220","Inconsistent interpretation of HTTP\u002F2 requests in Amazon CloudFront with AWS WAF enabled might allow remote actors to bypass AWS WAF managed rule body inspection via crafted HTTP\u002F2 requests that fragment the request body across frames so that only a partial body is inspected.\n\n\n\nThis issue was remediated server-side. No customer action is required.","2026-06-29T20:17:00Z",{"cvss_v3.1":10,"cvss_v4.0":20},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":19,"availabilityImpact":17,"privilegesRequired":18,"confidentialityImpact":17},"UNCHANGED","3.1",9.8,"NETWORK","CRITICAL","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","HIGH","NONE","LOW",{"Safety":21,"version":22,"Recovery":21,"baseScore":23,"Automatable":21,"attackVector":14,"baseSeverity":17,"valueDensity":21,"vectorString":24,"exploitMaturity":21,"providerUrgency":21,"userInteraction":18,"attackComplexity":19,"attackRequirements":18,"privilegesRequired":18,"subIntegrityImpact":17,"vulnIntegrityImpact":18,"integrityRequirement":21,"modifiedAttackVector":21,"subAvailabilityImpact":17,"vulnAvailabilityImpact":18,"availabilityRequirement":21,"modifiedUserInteraction":21,"modifiedAttackComplexity":21,"subConfidentialityImpact":17,"vulnConfidentialityImpact":18,"confidentialityRequirement":21,"modifiedAttackRequirements":21,"modifiedPrivilegesRequired":21,"modifiedSubIntegrityImpact":21,"modifiedVulnIntegrityImpact":21,"vulnerabilityResponseEffort":21,"modifiedSubAvailabilityImpact":21,"modifiedVulnAvailabilityImpact":21,"modifiedSubConfidentialityImpact":21,"modifiedVulnConfidentialityImpact":21},"NOT_DEFINED","4.0",7.9,"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:N\u002FSC:H\u002FSI:H\u002FSA:H\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",true,[27],"CWE-444",[29],"cpe:2.3:a:amazon:cloudfront:-:*:*:*:*:*:*:*",[31],"Amazon Cloudfront",[33],"https:\u002F\u002Faws.amazon.com\u002Fsecurity\u002Fsecurity-bulletins\u002F2026-048-aws\u002F",0.59,0.00626,0.49711,false,null,{"timestamp":40,"automatable":41,"tech_impact":42,"exploitation":43,"cisa_decision":44,"cisa_remediation_timeline":48},"2026-06-29T20:51:17.879298Z","yes","total","poc",{"vector":45,"decision":46,"priority":47},"CISAv1\u002FE:P\u002FA:Y\u002FT:T\u002FM:H\u002F2026-10-25T18:37:09.360295\u002F","attend","medium","3D",[50],{"name":51,"source":52,"tactics":53,"technique_id":55},"Exploit Public-Facing Application","attack_vector",[54],"initial-access","T1190",[]]