aws

• CVE-2026-55166 - Lemur ACME SSRF and creator-equality IDOR 2026-06-26
• CVE-2026-5058 - aws-mcp-server command injection RCE 2026-06-09