AK
Product
Apache Kylin
25
CVEs
0
On KEV
9.8
Max CVSS
21
New 30D
Severity mix
Critical 8High 7Medium 1Low 0
Watch
Add Apache Kylin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-108743 | 8.8 | Oct 16 | Apache Kylin: spark job OS command injection Affected: 4.0.4 through 5.0.4 |
| CVE-2026-68571 | 8.8 | Oct 16 | Apache Kylin: JDBC URL Whitelist Verification Bypass Affected: 4.0.0 through 5.0.4 |
| CVE-2026-69080 | 7.5 | Oct 16 | Apache Kylin: Broken Access Control in QuerySQLBlacklistController Affected: 4..0.0 through 5.0.4 |
| CVE-2026-69077 | 7.5 | Oct 16 | Apache Kylin: JobController allows unauthorized cross-project manipulation Affected: 4..0.0 through 5.0.4 |
| CVE-2026-69076 | 7.5 | Oct 16 | Apache Kylin: Unauthorized cross-project job discard Affected: 4..0.0 through 5.0.4 |
| CVE-2026-68572 | 7.5 | Oct 16 | Apache Kylin: Unauthorized SQL execution to Spark SQL env Affected: 4..0.0 through 5.0.4 |
| CVE-2026-63618 | 7.5 | Oct 16 | Apache Kylin: Low-Privilege Config Exposure Affected: 4..0.0 through 5.0.4 |
Showing 7