CLEANSTART-2026-QN00727 UTF8DataInputJsonParser

Security vulnerability affects the apache-zookeeper package. UTF8DataInputJsonParser...

CLEANSTART-2026-PG40177 NumberInput

Security vulnerability affects the apache-zookeeper package. NumberInput...

Vulnerability-POC-Dev

Vulnerability-POC-Dev Personal CVE vulnerabilities with autom...

PT-2026-116395

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.18.4 Apache Camel versions 4.19.0 through 4.22.0 Description A Server-Side Request Forgery SSRF issue exists in the AS2 component. The component accepts a destination address for the asynchronous Message...

Apache Camel 4.22.0 SMB Consumer Path Traversal

Apache Camel versions from 4.2.0 before 4.18.5 and from 4.19.0 before 4.22.1 contain a path traversal vulnerability in the SMB consumer that could allow a crafted share listing entry to access, delete, or rename files outside the polled directory...

Apache Camel 4.22.0 Azure Files Path Traversal

Apache Camel version 4.22.0 azure-files consumers can resolve a server-supplied listing name outside the configured directory, permitting retrieval and potentially deletion or rename of files using the endpoint credentials...

hackazon

Hackazon Hackazon is a free, vulnerable test site that is an online storefront built with the same technologies used in today’s rich client and mobile applications. Hackazon has an AJAX interface, strict workflows and RESTful API’s used by a companion mobile app providing uniquely-effective...

CVE-2026-86536

A flaw was found in Apache Thrift's JavaScript bindings. An unauthenticated remote attacker can exploit a prototype pollution vulnerability—where shared JavaScript object definitions are modified—by sending specially crafted input to an application using the affected bindings. Successful...

CVE-2026-94652

A flaw was found in Apache Thrift's C++ bindings. A remote attacker can cause a Denial of Service DoS by exploiting a memory leak where allocated system memory is not properly released after use. Over time, repeated requests can exhaust available memory and lead to service instability...

CVE-2026-68572

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue...

CVE-2026-69076

Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4 through 5.0.4. Users are...

CVE-2026-69080

Exposure of SQL Black List to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to version 5.0.5, which fixes the issue...

CVE-2026-68573

Improper Authentication vulnerability in Apache Kylin. Unauthenticated user may access to system cleanup actions. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin...

CVE-2026-69077

Exposure of unauthorized cross-project job manipulation vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4 through 5.0.4. Use...

CVE-2026-108743

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache...

CVE-2026-108709

Authentication bypass within in-house network in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4.0.4 through 5.0.4. Users are recommended t...

EUVD-2026-103156

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache...

CVE-2026-108743 Apache Kylin: spark job OS command injection

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache...

CVE-2026-108743

The Apache Kylin big data processing framework is vulnerable to an OS Command Injection (CWE-78) flaw in versions 4.0.4 through 5.0.4 . The vulnerability allows for the improper neutralization of special elements used in OS commands, specifically affecting spark jobs . This issue primarily impact...

EUVD-2026-103153

Authentication bypass within in-house network in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4.0.4 through 5.0.4. Users are recommended t...