Live › vulnerability › CVE-2026-108780
Go to dashboardApache Kylin versions 4.0.0 through 5.0.4 have a flaw in validating JDBC source configuration. The advisory says the impact is minor unless the Kylin backend services are reachable from the public network.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Apache Kylin 4.0.0 through 5.0.4. The advisory says the impact is minor unless the backend services are open to the public network, so internal-only deployments carry less risk. Teams on 5.0.5 or later, or on versions outside the affected range, can skip it.
No product ranges from the sources yet.
kylin.version value or the release directory name, and compare it against 4.0.0 through 5.0.45.0.5, which the advisory says fixes the issueEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Potential JDBC source configuration validation vulnerability in Apache Kylin. The impact is minor, unless the kylin backend services are open to public network.
This issue affects Apache Kylin: from 4.0.0 through 5.0.4.
Users are recommended to upgrade to version 5.0.5, which fixes the issue.
This page as .md · .json · in your agent: get_signal("CVE-2026-108780")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.