CVE-2026-62390

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin. A backend API refreshing table catalog may cause the injection to the generated SQL. This issue affects Apache Kylin: from 4 through 5.0.3. Users are recommended to upgrade to version 5.0.4, which fixes the issue.

• CWE-89

• https://lists.apache.org/thread/zdrj93txvdjj07f88s43d2pcg2gomvjcMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2026/07/14/4Mailing List, Third Party Advisory

Published

Jul 14, 2026

Last Modified

Jul 14, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-62378RustFS Console is a web management console for the RustFS di…9
• CVE-2026-6238The deprecated functions ns_printrrf, ns_printrr and fp_nque…6.5
• CVE-2026-62386The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-r…8.2
• CVE-2026-62387The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-r…7.1
• CVE-2026-62389Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-6239A stack‑based buffer overflow vulnerability exists in Tapo C…6.8
• CVE-2026-62391The security fix for CVE-2025-66518 is incomplete. Any clien…8.1
• CVE-2026-62392Improper Neutralization of Special Elements used in an OS Co…9.8
• CVE-2026-62393Improper Handling of Insufficient Permissions or Privileges …4.3
• CVE-2026-6240A stack-based buffer overflow vulnerability exists in Tapo C…6.8
• CVE-2026-6241An authenticated format string vulnerability is present in t…6.8
• CVE-2026-62414Joomla Extension - joomlack.fr - Improper access control in …9.1