As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-108743: Apache Kylin: spark job OS command injection
CVE-2026-108743 is an OS command injection vulnerability in Apache Kylin versions 4.0.4 through 5.0.4 that allows unauthenticated exploitation through improper neutralization of special elements in OS commands. The vulnerability primarily affects Kylin instances directly exposed to public networks, while internal deployments face lower risk.
Why it matters: Organizations running Apache Kylin 4.0.4 to 5.0.4 on internet-facing systems should apply patches immediately, as this enables remote code execution without authentication.
- Source published
- First seen by Cybersecurity Tracker