P4Verified

CVE-2026-77810: Athena Federated Query Neptune Connector 2024.15.1 through 2026.28.1

CVE-2026-77810. CVSS 3.1 base score 9.9 (CRITICAL, Source advisory). EPSS 0.00628 (percentile 0.48611), scored 11-Oct-2026.

Affected technology

Athena Federated Query Neptune Connector · 2024.15.1 through 2026.28.1
AWS

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

A user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. Source advisory’s CVSS 4.0 assessment (base score 9.4/10) rates confidentiality, integrity and availability impact as high.

Published 12-Oct-2026 16:54 UTC

CWE: CWE-95
CCR priority: 39.8 /100 (P4)
CVSS 3.1: 9.9 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · Source advisory
EPSS: 0.00628 · percentile 0.48611 · 2026-10-11
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-12 16:54:24.294989+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-77810.html