{"vulnerability": "CVE-2026-16584", "sightings": [{"uuid": "eb4d1758-84b7-4870-aa6c-211302ad8f16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16584", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrdd2js4g22v", "content": "CVE-2026-16584 - Security bypass in AWS API MCP Server v0.2.13-1.3.46. Init failure skips user-configured policy checks, allowing unauthorized AWS API ops. CVSS 7.0. Update immediately. #CVE #AWS #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-16584/", "creation_timestamp": "2026-07-23T17:04:50.345799Z"}, {"uuid": "2c4206c5-6a2d-4cf9-b364-d966ecdcf71b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16584", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116970375756122049", "content": "CVE-2026-16584 - Security bypass in AWS API MCP Server v0.2.13-1.3.46. Init failure skips user-configured policy checks, allowing unauthorized AWS API ops. CVSS 7.0. Update immediately. #CVE #AWS #infosec\nhttps://www.valtersit.com/cve/CVE-2026-16584/", "creation_timestamp": "2026-07-23T17:04:50.812464Z"}, {"uuid": "40d08f74-3163-4c80-aa67-9edf5058bbc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16584", "type": "seen", "source": "https://bsky.app/profile/rindrics.com/post/3mre5olrots2j", "content": "FYI @amazonwebservices.bsky.social \nThe title of the \u2018card view\u2019 entry for CVE-2026-16756 in the Security Bulletin has been incorrectly listed as that for CVE-2026-16584.\naws.amazon.com/security/sec...", "creation_timestamp": "2026-07-24T01:01:22.255042Z"}]}