Login Request a demo
IM
Product
Impala
by Apache · last CVE Oct 7, 2026
12
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 3High 5Medium 4Low 0
Severity
All severities12Critical3High5Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Impala to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-90466
6.5
1%
Oct 7
Apache Impala: Path traversal executes JARs outside trusted paths
Affected: 4.5.2
CVE-2018-11785
6.5
1%
Oct 24
Missing authorization check in Apache Impala before 3.0.1 allows a Kerberos-authenticated but unauthorized user to inject random data into a running query, leading to wrong…
Affected: before 3.0.1
CVE-2017-9792
6.5
2%
Oct 4
In Apache Impala (incubating) before 2.10.0, a malicious user with "ALTER" permissions on an Impala table can access any other Kudu table data by altering the table properties to…
Affected: 2.8.0; 2.9.0
CVE-2026-54048
5.3
1%
Sep 9
Apache Impala: Avro Schema URL Server-Side Request Forgery
Affected: 2.7.0 before 4.5.2
Showing 4