Live › vulnerability › CVE-2026-108743
Go to dashboardApache Kylin versions 4.0.4 through 5.0.4 let an input reach an operating system command without proper neutralization. An attacker who can reach the service may run commands on the host running Kylin.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Check the installed Kylin version (unknown how to read it from the sources); affected range is 4.0.4 through 5.0.4.
Upgrade Apache Kylin to version 5.0.5.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted.
This issue affects Apache Kylin: from 4.0.4 through 5.0.4.
Users are recommended to upgrade to version 5.0.5, which fixes the issue.
This page as .md · .json · in your agent: get_signal("CVE-2026-108743")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.