Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-56207

Signature of Bearer token is not verified in last step of SAML2 authentication for Impala's hs2-http interface, allowing altering user name and acting as another user. This issue affects Apache Impala: >=4.0.0. Users are recommended to upgrade to version 4.5.2, which fixes this issue.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 37.7%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2026-56207
  • Apache » Impala » Version: 4.0.0
    cpe:2.3:a:apache:impala:4.0.0
  • Apache » Impala » Version: 4.1.0
    cpe:2.3:a:apache:impala:4.1.0
  • Apache » Impala » Version: 4.1.1
    cpe:2.3:a:apache:impala:4.1.1
  • Apache » Impala » Version: 4.1.2
    cpe:2.3:a:apache:impala:4.1.2
  • Apache » Impala » Version: 4.2.0
    cpe:2.3:a:apache:impala:4.2.0
  • Apache » Impala » Version: 4.3.0
    cpe:2.3:a:apache:impala:4.3.0
  • Apache » Impala » Version: 4.4.0
    cpe:2.3:a:apache:impala:4.4.0
  • Apache » Impala » Version: 4.4.1
    cpe:2.3:a:apache:impala:4.4.1
  • Apache » Impala » Version: 4.5.0
    cpe:2.3:a:apache:impala:4.5.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved