CVE-2026-16756
CVE-2026-16756 - Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service
Published Oct 14, 2026 · Amazon Web Services
No description has been ingested for this record.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 14, 2026 · AWS Security Bulletins
Detected
CVE-2026-16756 - Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of service
Sources
- AWS Security BulletinsVendor advisoryCVE-2026-16756aws.amazon.com