VULNERABILITY INTELLIGENCE
CVE-2026-82863
CVSS score3.3 LOW
EPSS probability0.24%
CISA KEVNot currently listed
Published2026-08-31
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Description
@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring.
Weakness classification
- disclosure@vulncheck.com: CWE-778