CVE-2026-108771

Vendor

Apache Software Foundation

Product

Superset / Druid / Spark / Hadoop / Hive

Exposure class

Database

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 10
   CVE NVD 12d ago

   Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache Kylin.

   Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin…

   Fix available CVE-2026-108771 Apache Software Foundation