THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-90513 (MEDIUM 6.5) — A flaw has been found in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function SES.sendEmail of the file template.yml of the component API Gateway Endpoint. This manipulation of the argument toEmails/ccEmails/replyToEm

[NVD] CVE-2026-90513 (MEDIUM 6.5) — A flaw has been found in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function SES.sendEmail of the file template.yml of the component API Gateway Endpoint. This manipulation of the argument toEmails/ccEmails/replyToEm

highnvdPublished 2026-09-13

CVE-2026-90513 CVSS: 6.5 MEDIUM Published: 2026-09-13T11:17:00.237

A flaw has been found in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function SES.sendEmail of the file template.yml of the component API Gateway Endpoint. This manipulation of the argument toEmails/ccEmails/replyToEmails/subject/message causes missing authentication.

Indicators of compromise

bda6869aa81371d1e872242e74fe7d953edb818dsha1
CVE-2026-90513cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-90513