CVE record · 2 sources
CVE-2026-115416
CVSS 7.7Incorrect authorization checks in Amazon Athena engine version 3 query processing could have allowed an authenticated user to read AWS account…
- Vendor
- Amazon Web Services
- Product
- AWS services
- CVSS
- 7.7
- Exposure class
- Cloud platform
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
CVE-2026-115416 - Incorrect authorization checks in Amazon Athena engine version 3 query processing
Bulletin ID: 2026-144-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/22/2026 09:30 AM PDT Description: Amazon Athena is an interactive query service that allows you to analyze data in Amazon S3…
-
Incorrect authorization checks in Amazon Athena engine version 3 query processing could have allowed an authenticated user to read AWS account…
Incorrect authorization checks in Amazon Athena engine version 3 query processing could have allowed an authenticated user to read AWS account identifiers and SQL statement text query metadata from other AWS accounts. Query…