CVE-2026-108771

Apache Kylin versions 4.0.0 through 5.0.4 are vulnerable to a missing authentication flaw in the in-house broadcast API and a polymorphic deserialization vulnerability. These issues primarily impact services directly exposed to a public network, though in-house deployments are less likely to be a...