Fudan University (Organization): news timeline & CVEs

CVE-2026-69080: Apache Kylin: Broken Access Control in QuerySQLBlacklistController

Apache Kylin through 5.0.4 lets unauthorized users read the SQL blacklist.

Li Yang reported CVE-2026-69080, a broken access control flaw in Apache Kylin's QuerySQLBlacklistController that exposes the SQL blacklist to an unauthorized actor. It affects versions from 4.0.0 through 5.0.4 and is rated important. Apache recommends upgrading to 5.0.5. Finders include researchers from Fudan University's System and Software Security Lab and Yan Xu.

oss-securityOct 16, 03:51 UTC · 22h agoVulnerability 2 sources CVE-2026-69080

US and China experts push for shared rules banning AI control over nuclear weapons

Brookings and Fudan experts propose US-China red lines barring autonomous AI nuclear launch, ahead of a planned Trump-Xi meeting on September 24.

Melanie Sisson of the Brookings Institution and Tianjiao Jiang of Fudan University published proposals ahead of the planned September 24 Trump-Xi meeting: no autonomous AI launch of nuclear weapons, no AI attacks on nuclear command systems, human control over AI-driven cyberattacks on strategic infrastructure, a shared definition of 'human control,' and an AI-incident hotline. The recommendations build on the November 2024 Biden-Xi agreement. The NSCAI called for preserving human control in 2021, but binding mechanisms still do not exist, and Johns Hopkins' Carla Freeman doubts hotline efficacy, citing China not answering US calls during the 2023 spy balloon crisis.

The DecoderSep 18, 09:37 UTC · 28d agoAI policy1

Fudan University

Timeline2 articles

Related CVEsby mentions

Appears with

CVE-2026-69080: Apache Kylin: Broken Access Control in QuerySQLBlacklistController

US and China experts push for shared rules banning AI control over nuclear weapons