CVE-2026-62393

—

CVSS 3.1

4.3 medium

EPSS

<1%p38

Published

Jul 14, 2026 (Jul 14, 2026)

Modified

Jul 15, 2026

Description

Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin. Improper authorization in job information retrieval, where an attacker may get access to unauthorized jobs in other projects. This issue affects Apache Kylin: from 4 through 5.0.3. Users are recommended to upgrade to version 5.0.4, which fixes the issue.

Vendors: apache
Products: kylin
Weakness: CWE-280
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.