Skip to content

CVE record · 1 source

CVE-2026-108766

Missing authorization on jdbc source config update in Apache Kylin.

Vendor: Apache Software Foundation
Product: Superset / Druid / Spark / Hadoop / Hive
Exposure class: Database

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

10

CVE NVD 12d ago

Missing authorization on jdbc source config update in Apache Kylin.

Missing authorization on jdbc source config update in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This…

Fix available CVE-2026-108766 Apache Software Foundation