Lucene search
+L

7 matches found

NVD
NVD
•added 2026/09/09 11:17 a.m.•14 views

CVE-2026-57866

Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the aigeneratetext function can exfiltrate secrets provided by the credential providers configured in the hadoop.security.credential.provider.path property of...

8.8CVSS0.00576EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/09 10:39 a.m.•29 views

CVE-2026-57866

Apache Impala versions 4.4.x and 4.5.x are vulnerable to a Server Side Request Forgery (SSRF) . Authenticated users authorized to execute the ai_generate_text() function can exfiltrate secrets from credential providers defined in the hadoop.security.credential.provider.path property of core-site....

8.8CVSS6.1AI score0.00576EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/09/09 10:39 a.m.•17 views

CVE-2026-57866 Apache Impala: Secrets Exfiltration via SSRF

Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the aigeneratetext function can exfiltrate secrets provided by the credential providers configured in the hadoop.security.credential.provider.path property of...

6.1AI score0.00576EPSS
SaveExploits0References1
Mend
Mend
•added 2026/09/09 10:39 a.m.•5 views

CVE-2026-57866

Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the aigeneratetext function can exfiltrate secrets provided by the credential providers configured in the "hadoop.security.credential.provider.path" property of...

8.8CVSS6.1AI score0.00576EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/09/09 10:39 a.m.•20 views

CVE-2026-57866 Apache Impala: Secrets Exfiltration via SSRF

Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the aigeneratetext function can exfiltrate secrets provided by the credential providers configured in the hadoop.security.credential.provider.path property of...

8.8CVSS6AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/09/09 10:39 a.m.•17 views

EUVD-2026-74799

Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the aigeneratetext function can exfiltrate secrets provided by the credential providers configured in the hadoop.security.credential.provider.path property of...

6.1AI score0.00576EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•11 views

CVE-2026-57866: Server-Side Request Forgery (SSRF)

Server side request forgery in Apache Impala versions 4.4.x and 4.5.x. Authenticated Impala users with permissions to execute the aigeneratetext function can exfiltrate secrets provided by the credential providers configured in the hadoop.security.credential.provider.path property of...

8.8CVSS6.1AI score0.00576EPSS
SaveExploits0References4
Rows per page
Query Builder