Security Advisory
CVE-2026-9745
6.5
MEDIUM
Vulnerability Description
IBM Netezza Software 11.3.0.3 through Interim Fix 002 has operations that are performed without validating bucket ownership using the ExpectedBucketOwner parameter. This omission may allow a remote attacker to exploit misconfigurations or naming collisions to redirect application requests to an unintended S3 bucket under their control.
Published Date
September 3, 2026
Official Source
NIST NVD Advisory