CVE-2026-107352

Vendor

Amazon Web Services

Product

AWS services

CVSS

7.7

Exposure class

Cloud platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 15
   CVE NVD 24d ago

   Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to read limited query…

   Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to read limited query metadata (AWS account identifiers and SQL statement text) from other AWS accounts.…

   CVSS 7.7 CVE-2026-107352 Amazon Web Services
2. 14
   AWS bulletin AWS 24d ago

   CVE-2026-107352 - Missing authorization checks in Amazon Athena engine version 3 request handling

   Bulletin ID: 2026-128-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/07/2026 13:00 PM PDT Description: Missing authorization checks in Amazon Athena engine version 3 request handling could have…

   CVE-2026-107352 Amazon Web Services