CVE-2026-9745

6.5 mediumEPSS 0.3%

Medium (6.5) in ibm netezza performance server. EPSS 0.3% chance of exploitation in the next 30 days.

IBM Netezza Software 11.3.0.3 through Interim Fix 002 has operations that are performed without validating bucket ownership using the ExpectedBucketOwner parameter. This omission may allow a remote attacker to exploit misconfigurations or naming collisions to redirect application requests to an unintended S3 bucket under their control.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 25% of CVEs (scores of 2026-10-31)
CWE: CWE-283
Published: 2026-09-03
Modified: 2026-09-10
Record from: the NVD, synced 2026-10-19

Affected

ibm:netezza_performance_server

References

https://www.ibm.com/support/pages/node/7284359

Check your stack JSON