Apache Kylin
- Software type
- Other
- Total vulnerabilities (90 days)
- 12
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/19/2026, Apache Kylin recorded 12 security vulnerabilities in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Apache Kylin and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-108837Apache Kylin: Potential computed-column resource exhaustionCVE-2026-108833Apache Kylin: default startup profile miss security settingsCVE-2026-108823Apache Kylin: Potential unauthenticated job metadata replacementCVE-2026-108780Apache Kylin: Potential JDBC source configuration validation issueCVE-2026-108776Apache Kylin: tables/names SparkSQL injection| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-108837Apache Kylin: Potential computed-column resource exhaustion | Exploitation statusNot confirmed | FixYes | Published10/19/2026 | SeverityUnknown |
CVE-2026-108833Apache Kylin: default startup profile miss security settings | Exploitation statusNot confirmed | FixYes | Published10/19/2026 | SeverityUnknown |
CVE-2026-108823Apache Kylin: Potential unauthenticated job metadata replacement | Exploitation statusNot confirmed | FixYes | Published10/19/2026 | SeverityUnknown |
CVE-2026-108780Apache Kylin: Potential JDBC source configuration validation issue | Exploitation statusNot confirmed | FixYes | Published10/19/2026 | SeverityUnknown |
CVE-2026-108776Apache Kylin: tables/names SparkSQL injection | Exploitation statusNot confirmed | FixYes | Published10/19/2026 | SeverityUnknown |
CVE-2026-108771Apache Kylin: unauthenticated broadcast API and polymorphic deserialization | Exploitation statusNot confirmed | FixYes | Published10/19/2026 | SeverityUnknown |
CVE-2026-108766Apache Kylin: missing JDBC-config authorization | Exploitation statusNot confirmed | FixYes | Published10/19/2026 | SeverityUnknown |
CVE-2026-108764Apache Kylin: job-driver UI proxy SSRF | Exploitation statusNot confirmed | FixYes | Published10/19/2026 | SeverityUnknown |
CVE-2026-108762Apache Kylin: delete metadata backup path-confinement bypass | Exploitation statusNot confirmed | FixYes | Published10/19/2026 | SeverityUnknown |
CVE-2026-108743Apache Kylin: spark job OS command injection | Exploitation statusNot confirmed | FixYes | Published10/16/2026 | SeverityUnknown |
40 Results | Page 1 of 4