CVE-2026-69077

Apache Kylin versions 4 through 5.0.4 are affected by a vulnerability where the JobController component allows unauthorized cross-project job manipulation . This flaw primarily impacts services exposed directly to the public network, while in-house deployments are generally not impacted. To remed...

CVE-2026-69077 Apache Kylin: JobController allows unauthorized cross-project manipulation

Exposure of unauthorized cross-project job manipulation vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4 through 5.0.4. Use...

EUVD-2026-92489

Plane is an open-source project management tool. Prior to 1.4.0, BulkDeleteIssuesEndpoint and SubIssuesEndpoint in apps/api/plane/app/views/issue/ accept body- or URL-supplied issue IDs and operate on them without checking that the IDs belong to the caller's workspace and project. The permission...