Medium severity6.5NVD Advisory· Published Sep 3, 2026· Updated Sep 10, 2026
CVE-2026-9745
CVE-2026-9745
Description
IBM Netezza Software 11.3.0.3 through Interim Fix 002 has operations that are performed without validating bucket ownership using the ExpectedBucketOwner parameter. This omission may allow a remote attacker to exploit misconfigurations or naming collisions to redirect application requests to an unintended S3 bucket under their control.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 11.3.0.3 through Interim Fix 002
Patches
Vulnerability mechanics
References
1- www.ibm.com/support/pages/node/7284359nvdPatchVendor Advisory
News mentions
1- IBM Netezza & Qiskit SDK: Six Vulnerabilities Disclosed, Including Hardcoded CredentialsVypr Intelligence · Sep 3, 2026