AI
Product
Apache Impala
7
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 2High 2Medium 3Low 0
Watch
Add Apache Impala to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-56207 | 9.8 | Sep 9 | Apache Impala: SAML authentication bypass via forged bearer token Affected: 4.0.0 through 4.5.1 |
| CVE-2026-97720 | 9.1 | Oct 7 | Apache Impala: Impala Executor Webserver Auth Bypass Affected: 4.1.0 through 4.5.2 |
| CVE-2026-57866 | 8.8 | Sep 9 | Apache Impala: Secrets Exfiltration via SSRF Affected: 4.4.0 through 4.5.1 |
| CVE-2026-65181 | 8.1 | Sep 9 | Apache Impala: RCE via External Data Source Class Loading Affected: 2.7.0 through 4.5.1 |
| CVE-2026-90466 | 6.5 | Oct 7 | Apache Impala: Path traversal executes JARs outside trusted paths Affected: 4.5.2 before 4.5.3 |
| CVE-2026-93684 | 5.4 | Oct 7 | Apache Impala: Stored XSS in Impala query plans Affected: 2.7.0 through 4.5.2 |
| CVE-2026-54048 | 5.3 | Sep 9 | Apache Impala: Avro Schema URL Server-Side Request Forgery Affected: 2.0.0 through 4.5.1 |
Showing 7