Live › vulnerability › CVE-2026-69080
Go to dashboardApache Kylin versions 4 through 5.0.4 expose the SQL black list to actors who should not see it. An attacker can read which SQL patterns the server blocks and use that to craft queries that bypass the filter.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Apache Kylin from version 4 through 5.0.4 are affected. The sources do not say which deployment modes or access setups make the blacklist reachable, so the exposure path is unknown.
No product ranges from the sources yet.
unknown if the sources do not give a command; compare against 5.0.54.x and 5.0.45.0.5Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Exposure of SQL Black List to an Unauthorized Actor vulnerability in Apache Kylin.
This issue affects Apache Kylin: from 4 through 5.0.4.
Users are recommended to upgrade to version 5.0.5, which fixes the issue.
This page as .md · .json · in your agent: get_signal("CVE-2026-69080")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.