CVE detail
CVE-2026-35561
Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to intercept or hijack authentication sessions due to insufficient protections in the browser-based authentication flows. To remediate this issue, users should upgrade to version 2.1.0.0.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 19.5 · diversity 15.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
6 source links · newest first
- https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Windows/AmazonAthenaODBC-2.1.0.0.msidownloads.athena.us-east-1.amazonaws.com
No excerpt available.
Patchdownloads.athena.us-east-1.amazonaws.comApr 3, 2026, 9:17 PM - https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Mac/arm/AmazonAthenaODBC-2.1.0.0_arm.pkgdownloads.athena.us-east-1.amazonaws.com
No excerpt available.
Patchdownloads.athena.us-east-1.amazonaws.comApr 3, 2026, 9:17 PM - https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Mac/Intel/AmazonAthenaODBC-2.1.0.0_x86.pkgdownloads.athena.us-east-1.amazonaws.com
No excerpt available.
Patchdownloads.athena.us-east-1.amazonaws.comApr 3, 2026, 9:17 PM - https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Linux/AmazonAthenaODBC-2.1.0.0.rpmdownloads.athena.us-east-1.amazonaws.com
No excerpt available.
Patchdownloads.athena.us-east-1.amazonaws.comApr 3, 2026, 9:17 PM No excerpt available.
Release Notesdocs.aws.amazon.comApr 3, 2026, 9:17 PMNo excerpt available.
Vendor Advisoryaws.amazon.comApr 3, 2026, 9:17 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-0246CVSS 5.9 · Medium
A vulnerability with a privilege management mechanism in the Palo Alto Networks Prisma Access Agent® enables a locally authenticated non-administrative user to escalate their priv…
- CVE-2025-11791CVSS 7.1 · High
Sensitive information disclosure and manipulation due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 (Linux, macOS, Windows) b…
- CVE-2026-30797CVSS 9.3 · Critical
Missing Authorization vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme handler, config import modules) a…
- CVE-2023-45247CVSS 7.1 · High
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) befo…
- CVE-2023-45246CVSS 7.1 · High
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) befo…
- CVE-2023-45245CVSS 5.5 · Medium
Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 36119.