UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-108771
Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.
Properties
- Last source
- FIRST EPSS
- Nvd fetched at
- 2026-10-20T21:14:08.448323+00:00
- Epss score
- 0.00239
- Cve id
- CVE-2026-108771
- First seen by Signal
- 2026-10-19T11:09:12+00:00
- Retrieved at
- 2026-10-21T01:24:48+00:00
- Published at
- 2026-10-19T10:16:44.690
- Last modified
- 2026-10-19T20:46:17.023
- Epss percentile
- 0.14057
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph