We have reviewed CVE-2026-31431 and assessed its impact on our environment.

This vulnerability requires local user access to be exploited. Our production infrastructure is provisioned and managed entirely through Terraform (Infrastructure-as-Code), and we do not provision local user accounts on our servers or permit interactive local access. As a result, the practical exploitability of this vulnerability in our environment is significantly reduced.

We are actively monitoring the Amazon Linux Security Advisory (ALAS) channel for the official patched kernel. Once AWS publishes the remediated kernel, we will apply it through our standard patching process promptly and in line with our vulnerability management SLAs.

We will continue to monitor for any updates to this CVE and adjust our response if the threat profile changes. Please reach out to our security team if you have any further questions.

We have reviewed the recent Cisco security advisory (cisco-sa-sdwan-rpa-EHchtZk) regarding an authentication bypass vulnerability affecting Cisco Catalyst SD-WAN Controller (vSmart) and SD-WAN Manager (vManage).

After validation against our asset inventory and network architecture, we confirm that HackerRank does not utilize Cisco Catalyst SD-WAN solutions within our environment. As such, this vulnerability is not applicable to our infrastructure and no remediation actions are required at this time. We will continue to monitor vendor advisories and maintain routine validation against our technology stack as part of our ongoing risk management process.