As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-108764: Apache Kylin: job-driver UI proxy SSRF
CVE-2026-108764 is a server-side request forgery (SSRF) vulnerability in Apache Kylin versions 4.0.0 through 5.0.4, affecting the job-driver UI proxy component. The exposure primarily impacts public-facing Kylin job service deployments, which is uncommon; most internal installations are unaffected. Apache recommends upgrading to version 5.0.5 to remediate the issue.
Why it matters: Organizations operating Apache Kylin job services exposed to the public network should upgrade to 5.0.5 immediately to close SSRF attack surface; internal deployments carry lower risk and can plan patching on standard cycles.
- Source published
- First seen by Cybersecurity Tracker