| CVE-2026-108837 |
Apache Kylin: Potential computed-column resource exhaustion
|
Non notée
|
19 oct. 2026 |
| CVE-2026-108833 |
Apache Kylin: default startup profile miss security settings
|
Non notée
|
19 oct. 2026 |
| CVE-2026-108823 |
Apache Kylin: Potential unauthenticated job metadata replacement
|
Non notée
|
19 oct. 2026 |
| CVE-2026-108780 |
Potential JDBC source configuration validation vulnerability in Apache Kylin
|
Non notée
|
19 oct. 2026 |
| CVE-2026-108776 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin
|
Non notée
|
19 oct. 2026 |
| CVE-2026-108771 |
Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache Kylin. Impact most…
|
Non notée
|
19 oct. 2026 |
| CVE-2026-108766 |
Missing authorization on jdbc source config update in Apache Kylin. Impact most to the kylin services that are…
|
Non notée
|
19 oct. 2026 |
| CVE-2026-108764 |
Server-Side request forgery (SSRF) vulnerability in Apache Kylin. Impact most to the kylin job service that are directly…
|
Non notée
|
19 oct. 2026 |
| CVE-2026-108762 |
Path-confinement bypass during metadata backup deletion in Apache Kylin
|
Non notée
|
19 oct. 2026 |
| CVE-2026-108743 |
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache…
|
Non notée
|
16 oct. 2026 |
| CVE-2026-108709 |
Authentication bypass within in-house network in Apache Kylin. Impact most to the kylin services that are directly…
|
Non notée
|
16 oct. 2026 |
| CVE-2026-69080 |
Exposure of SQL Black List to an Unauthorized Actor vulnerability in Apache Kylin
|
Non notée
|
16 oct. 2026 |
| CVE-2026-69077 |
Exposure of unauthorized cross-project job manipulation vulnerability in Apache Kylin. Impact most to the kylin services…
|
Non notée
|
16 oct. 2026 |
| CVE-2026-69076 |
Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin. Impact most to the kylin services that…
|
Non notée
|
16 oct. 2026 |
| CVE-2026-68573 |
Improper Authentication vulnerability in Apache Kylin
|
Non notée
|
16 oct. 2026 |
| CVE-2026-68572 |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Kylin
|
Non notée
|
16 oct. 2026 |
| CVE-2026-68571 |
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Kylin
|
Non notée
|
16 oct. 2026 |
| CVE-2026-64959 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Missing Authentication for…
|
Non notée
|
16 oct. 2026 |
| CVE-2026-64610 |
Deserialization of Untrusted Data vulnerability in Apache Kylin. Unsafe Java deserialization could happen from a…
|
Non notée
|
16 oct. 2026 |
| CVE-2026-63619 |
Missing Authorization vulnerability in Apache Kylin
|
Non notée
|
16 oct. 2026 |
| CVE-2026-63618 |
Exposure of Sensitive Information (system level configuration info) to an Unauthorized Actor vulnerability in Apache…
|
Non notée
|
16 oct. 2026 |
| CVE-2026-62393 |
Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin. Improper authorization in job…
|
Non notée
|
14 juil. 2026 |
| CVE-2026-62392 |
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin
|
Non notée
|
14 juil. 2026 |
| CVE-2026-62390 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin
|
Non notée
|
14 juil. 2026 |
| CVE-2025-61735 |
Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin
|
Non notée
|
2 oct. 2025 |