Every CVE whose affected-product data names Amazon Tuftool, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (3)
CVE-2026-6967 — CVSS 5.9 (medium): Missing expiration, hash, and length enforcement in delegated metadata validation in awslabs/tough before tough-v0.22.0 allows remote…
CVE-2026-6968 — CVSS 5.9 (medium): Incomplete path traversal fixes in awslabs/tough before tough-v0.22.0 allow remote authenticated users with delegated signing authority to…
CVE-2026-6966 — CVSS 5.3 (medium): Improper verification of cryptographic signature uniqueness in delegated role validation in awslabs/tough before tough-v0.22.0 allows…