Apache Impala

Search everything

Mentions · 7d0
Mentions · 30d3
All mentions7
First seenSep 8, 2026
Last mentioned23d ago

Timeline

7 articles · newest first

CVE-2026-97720: Apache Impala: Impala Executor Webserver Auth Bypass

Apache Impala executor web servers skip JWT signature checks, allowing authentication bypass.

oss-securityOct 7, 05:11 UTC · 23d agoVulnerability 3 sourcesCVE-2026-977204

CVE-2026-93684: Apache Impala: Stored XSS in Impala query plans

Apache Impala stored XSS lets SELECT-only users run script in the query-plan Web UI.

oss-securityOct 7, 05:09 UTC · 23d agoVulnerability 3 sourcesCVE-2026-936842

CVE-2026-90466: Apache Impala: Path traversal executes JARs outside trusted paths

Apache Impala 4.5.2 path traversal can load attacker-controlled JARs outside trusted_jar_paths.

oss-securityOct 7, 05:06 UTC · 23d agoVulnerability 3 sourcesCVE-2026-904663 · 1 read

CVE-2026-65181: Apache Impala: RCE via External Data Source Class Loading

Apache Impala CVE-2026-65181 allows remote code execution through class loading of external data sources; rated important by Apache.

oss-securitySep 8, 21:41 UTC · Sep 8, 2026Vulnerability 3 sourcesCVE-2026-651812 · 1 read

CVE-2026-57866: Apache Impala: Secrets Exfiltration via SSRF

Apache Impala CVE-2026-57866 lets authenticated users abuse ai_generate_text() to exfiltrate secrets from configured Hadoop credential providers via SSRF.

oss-securitySep 8, 21:39 UTC · Sep 8, 2026Vulnerability 3 sourcesCVE-2026-578662

CVE-2026-56207: Apache Impala: SAML authentication bypass via forged bearer token

Apache Impala CVE-2026-56207 allows forged SAML bearer tokens on the hs2-http interface, letting attackers impersonate other users; fixed in 4.5.2.

oss-securitySep 8, 21:37 UTC · Sep 8, 2026Vulnerability 3 sourcesCVE-2026-562072

CVE-2026-54048: Apache Impala: Avro Schema URL Server-Side Request Forgery

Apache Impala CVE-2026-54048 lets crafted Avro schema URLs trigger SSRF to internal endpoints, with responses potentially leaking via error messages.

oss-securitySep 8, 21:36 UTC · Sep 8, 2026VulnerabilityCVE-2026-540483

Related CVEs

by mentions

CVE-2026-56207<1%9.8
SAML2 authentication bypass in Apache Impala hs2-http via unverified bearer token
published Sep 9, 2026Apache Impala
CVE-2026-977209.1
JWT signature bypass in Apache Impala executor webserver
published 23d agoApache Software Foundation Apache Impala
CVE-2026-57866<1%8.8
SSRF in Apache Impala lets authenticated users exfiltrate credential-provider secrets
published Sep 9, 2026Apache Impala
CVE-2026-65181<1%8.1
Authenticated RCE in Apache Impala via Data Source table class loading
published Sep 9, 2026Apache Impala
CVE-2026-904666.5
Path traversal loads untrusted JARs in Apache Impala
published 23d agoApache Impala
CVE-2026-936845.4
Stored XSS in Apache Impala query-plan Web UI
published 23d agoApache Impala
CVE-2026-54048<1%5.3
Server-Side Request Forgery in Apache Impala via Avro Schema URL
published Sep 9, 2026Apache Impala

Appears with

Apachevendor · 6
Apache Software Foundationorganization · 3
Arenadatavendor · 1
Hadoopproduct · 1
Arenadataorganization · 1
Apache Software Foundationvendor · 1

Entities are extracted by the model from each article. First seen Sep 8, 2026, last mentioned 23d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.