https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T16:47:07.983064+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-366548 EUVD-2026-366548 2026-10-05T16:47:08.056261+00:00 EUVD-2026-366548 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56207 fkie_cve-2026-56207 2026-10-05T16:47:08.056302+00:00

Signature of Bearer token is not verified in last step of SAML2 authentication for Impala's hs2-http interface, allowing altering user name and acting as another user.

This issue affects Apache Impala: >=4.0.0.

Users are recommended to upgrade to version 4.5.2, which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-3mmv-f538-2fpw GHSA-3mmv-f538-2fpw 2026-10-05T16:47:08.056340+00:00

Signature of Bearer token is not verified in last step of SAML2 authentication for Impala's hs2-http interface, allowing altering user name and acting as another user.

This issue affects Apache Impala: >=4.0.0.

Users are recommended to upgrade to version 4.5.2, which fixes this issue.