oss-security·23h agoCVE-2026-108771: Apache Kylin: unauthenticated broadcast API and polymorphic deserialization#apache-kylin#cve-2026-108771#deserializationCVE-2026-1087712