News · via oss-security
CVE-2026-108771: Apache Kylin: unauthenticated broadcast API and polymorphic deserialization
Posted by Li Yang on Oct 15 Severity: moderate Affected versions: - Apache Kylin 4.0.0 through 5.0.4 Description: Missing authentication for in-house broadcast and polymorphic deserialization…