AWS Research and Engineering Studio (RES)

• CVE-2026-5709 High 8.8 AWS Research and Engineering Studio (RES) FileBrowser Command Injection 1.1%
• CVE-2026-5708 High 8.8 Improper Control of User-Modifiable Attributes in RES CreateSession API 0.9%
• CVE-2026-5707 High 8.8 Command Injection via Virtual Desktop Session Name in AWS Research and Engineering Studio (RES) 1.0%
• CVE-2025-12815 Medium 4.3 An ownership verification issue in the Virtual Desktop preview page in the Research and Engineering Studio (RES) on AWS before version 2025.09 may allow an authenticated remote user to view another us 0.3%