NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#jdbc

0 stories this week · 4 this month · 6 in 6 months · mostly security

Stories per day · 30 days

Relatedapache-kylin3 advisory1 apache-iotdb1 authorization1 code-injection1 configuration1 cve-2026-1087661 cve-2026-1087801 cve-2026-685711 denial-of-service1 iotdb1 missing-auth1 whitelist-bypass1

5 stories, newest first · one card per story

oss-security21d ago

IoTDB JDBC driver memory exhaustion fixed in 2.0.11 (CVE-2026-41114)

Versions from 1.3.3 before 2.0.11 can exhaust memory via BigDecimal toPlainString.

4 sources apache-iotdb jdbc

1

oss-security26d ago

CVE-2026-108766: Apache Kylin: missing JDBC-config authorization

Apache Kylin 4.0.0 through 5.0.4 lacks JDBC-config authorization; users should upgrade to 5.0.5.

11 sources apache-kylin cve-2026-108766

5

oss-security26d ago

CVE-2026-68571: Apache Kylin: JDBC URL Whitelist Verification Bypass

Apache Kylin CVE-2026-68571 lets crafted JDBC URLs bypass whitelist checks and inject code.

8 sources apache-kylin cve-2026-68571

2

oss-securitySep 28, 2026high

CVE-2026-91048: Apache Karaf: Missing authorization on the jdbc:* shell command scope allows privilege escalation to remote code execution via jdbc:ds-create

CVE-2026-91048 lets authenticated Apache Karaf users, including viewers, run jdbc commands and achieve code execution.

2 sources apache-karaf cve-2026-91048

2

oss-securitySep 23, 2026

CVE-2026-96443: Apache Doris: JDBC driver URL validation bypass leads to remote code execution

Apache Doris JDBC driver URL validation bypass CVE-2026-96443 can lead to remote code execution; Apache rates it moderate.

2 sources apache-doris cve-2026-96443

3