Product by Apache Software Foundation
Apache Polaris
5 known vulnerabilities in Apache Polaris (Apache Software Foundation), 0 of them actively exploited (CISA KEV).
Key figures
5
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-42811 | Apache Polaris: Expression Language Injection | 9.9 | |
| Critical | CVE-2026-42810 | Apache Polaris: Improper Input Validation | 9.9 | |
| Critical | CVE-2026-42812 | Apache Polaris: No protection on `write.metadata.path` | 9.9 | |
| Critical | CVE-2026-42809 | Apache Polaris: staged table creation could vend storage credentials for unvalidated locations | 9.9 | |
| Medium | CVE-2026-64640 | Apache Polaris: Incorrect Authorization | 6.5 |