AP
Product
Apache Polaris
by Apache Software Foundation · last CVE Sep 29, 2026
6
CVEs
0
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 4High 1Medium 1Low 0
Watch

Add Apache Polaris to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-64640
6.5
0%
Aug 6
Apache Polaris: register endpoint reads attacker-controlled storage location before allowed-locations validation
Affected: through 1.6.0
Showing 1