Vulnerability Bulletins |
CVE-2026-9745 |
|
| Affected software | IBM |
| IBM Netezza Software 11.3.0.3 through Interim Fix 002 has operations that are performed without validating bucket ownership using the ExpectedBucketOwner parameter. This omission may allow a remote attacker to exploit misconfigurations or naming collisions to redirect application requests to an unintended S3 bucket under their control. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-9745 | |