AWS emr: Added 3 CVEs to EMR on EKS 7.3.0 non-impacting CVE table
Summary
Updated the 'CVE not impacting EMR on EKS 7.3.0' table date to October 9, 2026 and added two HIGH (CVE-2026-40467, CVE-2026-60005) and one MEDIUM (CVE-2026-40468) CVE entries with NVD links.
Security assessment
The change appends two HIGH and one MEDIUM CVE records to the table documenting vulnerabilities that do not impact EMR on EKS 7.3.0 job runs. No code, IAM, encryption, or network configuration changes are present; this is CVE exposure documentation, so medium severity.
Evidence
+CVE-2026-40467 | HIGH | [https://nvd.nist.gov/vuln/detail/CVE-2026-40467](https://nvd.nist.gov/vuln/detail/CVE-2026-40467)
Diff
diff --git a/emr/latest/EMR-on-EKS-DevelopmentGuide/emr-on-eks-730-common-vulnerabilities-exposures.md b/emr/latest/EMR-on-EKS-DevelopmentGuide/emr-on-eks-730-common-vulnerabilities-exposures.md index bb5bef7..452ef12 100644 --- a//emr/latest/EMR-on-EKS-DevelopmentGuide/emr-on-eks-730-common-vulnerabilities-exposures.md +++ b//emr/latest/EMR-on-EKS-DevelopmentGuide/emr-on-eks-730-common-vulnerabilities-exposures.md @@ -11 +11 @@ The following table lists all CVEs that don't impact EMR on EKS job runs that ru -This table was updated on August 21, 2026. +This table was updated on October 9, 2026. @@ -32,0 +33,3 @@ CVE-2025-27818 | HIGH | [https://nvd.nist.gov/vuln/detail/CVE-2025-27818](http +CVE-2026-40467 | HIGH | [https://nvd.nist.gov/vuln/detail/CVE-2026-40467](https://nvd.nist.gov/vuln/detail/CVE-2026-40467) +CVE-2026-60005 | HIGH | [https://nvd.nist.gov/vuln/detail/CVE-2026-60005](https://nvd.nist.gov/vuln/detail/CVE-2026-60005) +CVE-2026-40468 | MEDIUM | [https://nvd.nist.gov/vuln/detail/CVE-2026-40468](https://nvd.nist.gov/vuln/detail/CVE-2026-40468)