CVE-2026-86516

    Dashboard / Vulnerabilities / CVE-2026-86516

    CVE-2026-86516

    Published: 8 Sept 2026Last Modified: 10 Sept 2026

    Summary: elenavanengelenmaslova mocknest-serverless AWS GitHub OIDC Deployment Helper Script github-oidc-role.yaml privileges management

    Details: A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function of the file deployment/aws/shared/github-oidc-role.yaml of the component AWS GitHub OIDC Deployment Helper Script. Performing a manipulation results in improper privilege management. It is possible to initiate the attack remotely. The patch is named 6ab3147282d867c1993f995272750db091c2290b. Applying a patch is the recommended action to fix this issue.

    References: https://github.com/elenavanengelenmaslova/mocknest-serverless/, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/86xxx/CVE-2026-86516.json, https://nvd.nist.gov/vuln/detail/CVE-2026-86516, https://vuldb.com/cve/CVE-2026-86516, https://vuldb.com/submit/908568, https://vuldb.com/vuln/399670, https://vuldb.com/vuln/399670/cti, https://github.com/elenavanengelenmaslova/mocknest-serverless/commit/6ab3147282d867c1993f995272750db091c2290b, https://github.com/elenavanengelenmaslova/mocknest-serverless/pull/254

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 537dae82c8e27946e26f19496e0ad99ceadccf27
    Fixed -6ab3147282d867c1993f995272750db091c2290b

    Affected versions

    0.9.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-86516 | CVE-DB