Vulnerabilities and CVEs

06:28 Vulnerability

CVE-2026-68482: Apache Answer: Improper Authorization in Question Invite User Lookup

CVE-2026-68482oss-security

06:26 Vulnerability

CVE-2026-67249: Apache Answer: Email Code Purpose Confusion May Allow Account Takeover

CVE-2026-67249oss-security

06:24 Vulnerability

CVE-2026-64945: Apache Answer: Incorrect permission mapping allows users with only the unpin permission to hide/show questions

CVE-2026-64945oss-security

06:22 Vulnerability

CVE-2026-64944: Apache Answer: Stored XSS via unsanitized HTML in imported question content

CVE-2026-64944oss-security

06:19 Vulnerability

CVE-2026-64943: Apache Answer: API keys logged in plaintext during authentication

CVE-2026-64943oss-security

06:12 Vulnerability

CVE-2026-108837: Apache Kylin: Potential computed-column resource exhaustion

CVE-2026-108837oss-security

06:10 Vulnerability

CVE-2026-108833: Apache Kylin: default startup profile miss security settings

CVE-2026-108833oss-security

06:08 Vulnerability

CVE-2026-108823: Apache Kylin: Potential unauthenticated job metadata replacement

CVE-2026-108823oss-security

06:06 Vulnerability

CVE-2026-108780: Apache Kylin: Potential JDBC source configuration validation issue

CVE-2026-108780oss-security

06:04 Vulnerability

CVE-2026-108776: Apache Kylin: tables/names SparkSQL injection

CVE-2026-108776oss-security

06:02 Vulnerability

CVE-2026-108771: Apache Kylin: unauthenticated broadcast API and polymorphic deserialization

CVE-2026-108771oss-security

06:00 Patch

CVE-2026-108766: Apache Kylin: missing JDBC-config authorization

CVE-2026-108766oss-security

06:00 Vulnerability

Thinking in Graphs: Neo4j-Backed Exploit-Chain Reasoning for LLM Penetration-Testing Agents

arXiv cs.CR

06:00 Vulnerability

Does Client Diversity Protect the Lightning Network? Evidence from the 2026 Core Lightning Shutdown

arXiv cs.CR

05:58 Vulnerability

CVE-2026-108764: Apache Kylin: job-driver UI proxy SSRF

CVE-2026-108764oss-security

05:57 Vulnerability

CVE-2026-108762: Apache Kylin: delete metadata backup path-confinement bypass

CVE-2026-108762oss-security

05:55 Vulnerability

CVE-2026-108743: Apache Kylin: spark job OS command injection

CVE-2026-108743oss-security

01:05 Vulnerability

CVE-2026-96806: Apache Airflow Keycloak provider: Keycloak auth manager: logout does not invalidate the session — JWTMiddleware mints an unrevoked replacement token

CVE-2026-96806oss-security

01:03 Vulnerability

CVE-2026-94135: Apache Airflow SFTP provider: Async SFTP hook disables host-key verification by default

CVE-2026-94135oss-security

01:01 Vulnerability

CVE-2026-94134: Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by default

CVE-2026-94134oss-security