Approved changes feed: RSS · Atom

cpe:2.3:a:apache_software_foundation:apache_kylin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a)
ProductApache Kylin (ec6cb259-23b8-58af-8dee-4ad94a337ad4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-69080 vulnerable 2026-11-03 10:18:10.506774 Apache Kylin: Broken Access Control in QuerySQLBlacklistController
Exposure of SQL Black List to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.
Published: 2026-10-16T19:37:50.174Z
Updated: 2026-10-20T18:04:54.819Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-69076 vulnerable 2026-11-03 10:18:08.902102 Apache Kylin: Unauthorized cross-project job discard
Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.
Published: 2026-10-16T19:32:39.538Z
Updated: 2026-10-20T18:02:18.110Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-69077 vulnerable 2026-11-03 10:18:06.084957 Apache Kylin: JobController allows unauthorized cross-project manipulation
Exposure of unauthorized cross-project job manipulation vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.
Published: 2026-10-16T19:33:20.218Z
Updated: 2026-10-20T18:03:35.109Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-108762 vulnerable 2026-11-03 10:18:02.240906 Apache Kylin: delete metadata backup path-confinement bypass
Path-confinement bypass during metadata backup deletion in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.
Published: 2026-10-19T09:16:25.736Z
Updated: 2026-10-30T16:28:09.058Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-108766 vulnerable 2026-11-03 10:18:02.194672 Apache Kylin: missing JDBC-config authorization
Missing authorization on jdbc source config update in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.
Published: 2026-10-19T09:20:48.058Z
Updated: 2026-10-30T16:30:46.005Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-108743 vulnerable 2026-11-03 10:18:02.136480 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-108776 vulnerable 2026-11-03 10:18:02.026099 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-108709 vulnerable 2026-11-03 10:18:01.831447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-108780 vulnerable 2026-11-03 10:18:01.301093 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-108771 vulnerable 2026-11-03 10:18:01.280856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-108823 vulnerable 2026-11-03 10:18:00.830430 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-108764 vulnerable 2026-11-03 10:18:00.592271 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-108833 vulnerable 2026-11-03 10:18:00.491032 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-108837 vulnerable 2026-11-03 10:18:00.242697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-68572 vulnerable 2026-11-03 10:17:37.904246 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-68573 vulnerable 2026-11-03 10:17:37.758657 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-68571 vulnerable 2026-11-03 10:17:37.539790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-64959 vulnerable 2026-11-03 10:16:31.477549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-64610 vulnerable 2026-11-03 10:16:31.423720 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-63619 vulnerable 2026-11-03 10:15:43.503077 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-63618 vulnerable 2026-11-03 10:15:43.095130 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-62393 vulnerable 2026-07-29 01:06:19.075454 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-62392 vulnerable 2026-07-29 01:06:19.075180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-62390 vulnerable 2026-07-29 01:06:19.074881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61735 vulnerable 2026-06-08 07:37:27.970229 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61734 vulnerable 2026-06-08 07:37:27.969890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61733 vulnerable 2026-06-08 07:37:27.968217 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30067 vulnerable 2026-06-08 07:16:59.028602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48944 vulnerable 2026-06-08 06:50:11.748563 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23590 vulnerable 2026-06-08 06:29:39.973101 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29055 vulnerable 2026-06-08 06:02:38.186694 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44621 vulnerable 2026-06-08 05:49:35.893236 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43396 vulnerable 2026-06-08 05:49:31.762380 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-24697 vulnerable 2026-06-08 05:41:01.394878 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45458 vulnerable 2026-06-08 05:36:48.171590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45457 vulnerable 2026-06-08 05:36:48.169623 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45456 vulnerable 2026-06-08 05:36:48.166998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36774 vulnerable 2026-06-08 05:32:52.507712 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-31522 vulnerable 2026-06-08 05:31:53.577378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27738 vulnerable 2026-06-08 05:31:22.102530 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.