CVE-2026-18236 – CyberSecurityBoard

Critical CVEs

AWS, Google, and Vercel Patch Agent Flaws Allowing Tool Execution Without Model Authorization

Security researchers have uncovered a class of vulnerabilities in agent infrastructure from Amazon Web Services (AWS), Google, and Vercel that allow attackers…

Agent Infrastructure AI Security Amazon Bedrock AgentCore Amazon Web Services

August 6, 2026

Critical CVEs

CVE-2026-18236: Google ADK Continuation Forgery

Google ADK for Python before 2.5.0 allows attackers to forge confirmation events in session history, causing unauthorized execution of sensitive tools. CVSS…

ADK confirmation forgery CVE-2026-18236 CWE-863

August 6, 2026

Cyber Products

Google ADK Vulnerabilities

Google's Agent Development Kit for Python had two vulnerabilities fixed in version 2.5.0: continuation forgery and resumable-mode bypass.

ADK CVE-2026-18236 Google Google ADK

August 6, 2026