CVE-2026-115416
High · 7.7CVSS
7.7
EPSS
0.3%
Published
Oct 22, 2026
CISA due date
—
The record
Incorrect authorization checks in Amazon Athena engine version 3 query processing could have allowed an authenticated user to read AWS account identifiers and SQL statement text query metadata from other AWS accounts. Query results, and data stored in Amazon S3 or other data sources, were not accessible through this issue. AWS remediated the issue on October 7, 2026. No customer action is required.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-109083 Improper isolation or compartmentalization vulnerability in Apache Syncope. CWE-653
- CVE-2026-113687 Improper isolation or compartmentalization vulnerability in Apache Syncope. CWE-653
- CVE-2026-120306 Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line… CWE-653
- CVE-2026-119408 n8n before 2.42.6, 2.43.x before 2.43.3, and 3.x before 3.0.1 contains a remote code… CWE-653
- CVE-2026-115517 Unrestricted network access between execution contexts in KNIME Business Hub before… CWE-653
- CVE-2026-15366 A control logic defect in a specific built-in webpage of Kids Mode allows users to view… CWE-653
- CVE-2026-62246 Kamaji is the Hosted Control Plane Manager for Kubernetes. CWE-653
- CVE-2026-65635 Improper Isolation or Compartmentalization vulnerability in malach-it boruta… CWE-653