UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-108762
Path-confinement bypass during metadata backup deletion in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.
Properties
- Last source
- FIRST EPSS
- Nvd fetched at
- 2026-10-20T21:14:08.448323+00:00
- Epss score
- 0.0021
- Cve id
- CVE-2026-108762
- First seen by Signal
- 2026-10-19T11:09:12+00:00
- Retrieved at
- 2026-10-21T01:24:48+00:00
- Published at
- 2026-10-19T10:16:44.313
- Last modified
- 2026-10-19T20:46:17.023
- Epss percentile
- 0.10537
Explore deeper with Ninja Signal's threat intelligence graph