AK
Product
Apache Kylin
31
CVEs
0
On KEV
9.8
Max CVSS
21
New 30D
Severity mix
Critical 9High 11Medium 2Low 0
Watch
Add Apache Kylin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-108743 | 8.8 | Oct 16 | Apache Kylin: spark job OS command injection Affected: 4.0.4 through 5.0.4 |
| CVE-2026-68571 | 8.8 | Oct 16 | Apache Kylin: JDBC URL Whitelist Verification Bypass Affected: 4.0.0 through 5.0.4 |
| CVE-2026-69080 | 7.5 | Oct 16 | Apache Kylin: Broken Access Control in QuerySQLBlacklistController Affected: 4..0.0 through 5.0.4 |
| CVE-2026-69077 | 7.5 | Oct 16 | Apache Kylin: JobController allows unauthorized cross-project manipulation Affected: 4..0.0 through 5.0.4 |
| CVE-2026-69076 | 7.5 | Oct 16 | Apache Kylin: Unauthorized cross-project job discard Affected: 4..0.0 through 5.0.4 |
| CVE-2026-68572 | 7.5 | Oct 16 | Apache Kylin: Unauthorized SQL execution to Spark SQL env Affected: 4..0.0 through 5.0.4 |
| CVE-2026-63618 | 7.5 | Oct 16 | Apache Kylin: Low-Privilege Config Exposure Affected: 4..0.0 through 5.0.4 |
| CVE-2025-61733 | 7.5 | Oct 2 | Apache Kylin: Authentication bypass Affected: 4.0.0 through 5.0.2 |
| CVE-2025-61734 | 7.5 | Oct 2 | Apache Kylin: improper restriction of file read Affected: 4.0.0 through 5.0.2 |
| CVE-2025-61735 | 7.3 | Oct 2 | Apache Kylin: Server-Side Request Forgery Affected: 4.0.0 through 5.0.2 |
| CVE-2025-30067 | 7.2 | Mar 27 | Apache Kylin: The remote code execution via jdbc url Affected: 4.0.0 through 5.0.1 |
Showing 11