CVE-2026-108776

A SQL Injection vulnerability exists in Apache Kylin affecting versions 4.0.0 through 5.0.4 . The flaw is caused by the improper neutralization of special elements used in an SQL command within the tables/names SparkSQL component. The impact is considered moderate when the Kylin service is operat...

CVE-2026-108776 Apache Kylin: tables/names SparkSQL injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Kylin. The impact is moderate if kylin service is in query only mode, which is the default and most common mode. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are...

Blinder - A Python Library To Automate Time-Based Blind SQL Injection

Blidner is a small python library to automate time-based blind SQL injection by using a pre defined queries as a functions to automate a rapid PoC development. Installation You can install Blinder using the following command: pip install blinder Or by downloading the source and importing it...