UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-108837
Allocation of resources without limits or throttling vulnerability in Apache Kylin. Given an attacker has got project admin permission, an cache API maybe used to cause computed-column resource exhaustion. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue.
Properties
- Last source
- FIRST EPSS
- Nvd fetched at
- 2026-10-20T21:14:08.448323+00:00
- Epss score
- 0.00197
- Cve id
- CVE-2026-108837
- First seen by Signal
- 2026-10-19T11:09:12+00:00
- Retrieved at
- 2026-10-21T01:24:48+00:00
- Published at
- 2026-10-19T10:16:45.220
- Last modified
- 2026-10-19T20:46:17.023
- Epss percentile
- 0.08907
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph