Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

#apache-kylin — news, CVEs and analysis · ZeroHour

03:08 UTC· 19m ago

today 54K visits · 54K views · 107 reads·all time 1.7M views

Tag

#apache-kylin

18 stories this week · 18 this month · 18 in 6 months · mostly security

stories per day · 30 days

Related#apache 6 #patch 4 #authorization 3 #jdbc 3 #oss-security 3 #advisory 2 #configuration 2 #deserialization 2 #metadata 2 #missing-authentication 2 #path-traversal 2 #sql-injection 2 #authentication 1 #broadcast-api 1 #code-injection 1 #cve-2026-108762 1 #cve-2026-108764 1 #cve-2026-108766 1

14 stories, newest first · one card per story

oss-security·23h ago

CVE-2026-68571: Apache Kylin: JDBC URL Whitelist Verification Bypass

#apache-kylin #cve-2026-68571 #jdbc

CVE-2026-68571

oss-security·23h ago

CVE-2026-108833: Apache Kylin: default startup profile miss security settings

#apache-kylin #cve-2026-108833 #misconfiguration

CVE-2026-108833

2

oss-security·23h ago

CVE-2026-108776: Apache Kylin: tables/names SparkSQL injection

#apache-kylin #cve-2026-108776 #sql-injection

CVE-2026-108776

2

oss-security·23h ago

CVE-2026-108771: Apache Kylin: unauthenticated broadcast API and polymorphic deserialization

#apache-kylin #cve-2026-108771 #deserialization

CVE-2026-108771

2

oss-security·23h ago

CVE-2026-108766: Apache Kylin: missing JDBC-config authorization

#apache-kylin #cve-2026-108766 #authorization

CVE-2026-108766

2

oss-security·23h ago

CVE-2026-108764: Apache Kylin: job-driver UI proxy SSRF

#apache-kylin #ssrf #cve-2026-108764

CVE-2026-108764

1

oss-security·23h ago

CVE-2026-108762: Apache Kylin: delete metadata backup path-confinement bypass

#apache-kylin #path-traversal #cve-2026-108762

CVE-2026-108762

oss-security·23h ago

CVE-2026-68572: Apache Kylin: Unauthorized SQL execution to Spark SQL env

#apache-kylin #cve-2026-68572 #sql

CVE-2026-68572

oss-security·23h ago

CVE-2026-69077: Apache Kylin: JobController allows unauthorized cross-project manipulation

#apache-kylin #cve-2026-69077 #authorization

CVE-2026-69077

oss-security·23h ago

CVE-2026-69076: Apache Kylin: Unauthorized cross-project job discard

#apache-kylin #cve-2026-69076 #authorization

CVE-2026-69076

oss-security·23h ago

CVE-2026-68573: Apache Kylin: Unauthenticated Metastore Cleanup

#apache-kylin #cve-2026-68573 #authentication

CVE-2026-68573

oss-security·23h ago high

CVE-2026-64959: Apache Kylin: Missing authentication on certain cache API endpoints

#apache-kylin #cve-2026-64959 #sql-injection

CVE-2026-64959

oss-security·23h ago

CVE-2026-64610: Apache Kylin: Redis unsafe Java deserialization

#apache-kylin #cve-2026-64610 #deserialization

CVE-2026-64610

oss-security·23h ago

CVE-2026-63618: Apache Kylin: Low-Privilege Config Exposure

#apache-kylin #cve-2026-63618 #information-disclosure

CVE-2026-63618