AWS AWS Ops Wheel

• CVE-2026-18481 High 7.3 Stored XSS in Participant URL Field leads to Account Takeover via Session Token Theft 0.5%
• CVE-2026-6912 High 8.8 Privilege Escalation via Self-Writable Cognito Custom Attribute in AWS Ops Wheel 0.6%
• CVE-2026-6911 Critical 9.8 Authentication Bypass via Missing JWT Signature Verification in AWS Ops Wheel 0.3%