Skip to content

CVE record · 1 source

CVE-2026-68571

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Kylin.

Vendor: Apache Software Foundation
Product: Superset / Druid / Spark / Hadoop / Hive
Exposure class: Database

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

10

CVE NVD 16d ago

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Kylin.

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Kylin. Special parameter in JDBC URL can lead to code injection. Impact most to the kylin services that are directly exposed to public network…

Fix available CVE-2026-68571 Apache Software Foundation