https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:07:45.547934+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-56207 CVE-2026-56207 — Apache Impala: SAML authentication bypass via forged bearer token 2026-10-06T19:07:45.567052+00:00

Affected: Apache Software Foundation Apache Impala

Signature of Bearer token is not verified in last step of SAML2 authentication for Impala's hs2-http interface, allowing altering user name and acting as another user.

This issue affects Apache Impala: >=4.0.0.

Users are recommended to upgrade to version 4.5.2, which fixes this issue.