Skip to content
NewA calmer, faster ZeroHour
Vulnerabilityhigh

CVE-2026-65181: Apache Impala: RCE via External Data Source Class Loading

oss-security ()2 · 1 read
Read at seclists.org
Part of a story covered by 3 sourcesApache Impala hit by three same-day CVEs: critical SAML auth bypass, SSRF secrets exfiltration, and RCE via external data source class loadingMerged summary & timeline
AI summary · glm-5.3-flashSummaries by Vani AI

Apache Impala CVE-2026-65181 allows remote code execution through class loading of external data sources; rated important by Apache.

Apache disclosed CVE-2026-65181, a remote code execution vulnerability in Apache Impala triggered via class loading of external data sources. The Apache Software Foundation rated the issue 'important'. The disclosure was posted to the oss-security mailing list on September 8, 2026.

Key facts
  • Remote code execution via external data source class loading in Apache Impala
  • Rated important by the Apache Software Foundation
  • Disclosed via the oss-security mailing list on 2026-09-08
Analyze CVE-2026-65181 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-65181
Tags
apachedata-lakehouseimpalarcevulnerability
Vendors
Apache
Products
Apache Impala

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-65181
Authenticated RCE in Apache Impala via Data Source table class loading
8.1<1%

From the original article

Posted by Michael Smith on Sep 08 Severity: important https://impala. apache. org/...

oss-security

seclists.org

Read the full article at oss-security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.