Every CVE whose affected-product data names Apache Polaris, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (4)
CVE-2026-42809 — CVSS 9.9 (critical): Apache Polaris can issue broad temporary ("vended") storage credentials during staged table creation before the effective table location…
CVE-2026-42810 — CVSS 9.9 (critical): Apache Polaris accepts literal `*` characters in namespace and table names. When it later builds temporary S3 access policies for delegated…
CVE-2026-42811 — CVSS 9.9 (critical): In plain terms, Apache Polaris is supposed to issue short-lived GCS credentials that only work for one table's files, but a crafted…
CVE-2026-42812 — CVSS 9.9 (critical): In Apache Iceberg, the table's metadata files are control files: they tell readers which data files belong to the table and which table…