CVE-2026-62392

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin. A backend API may bring job config parameters to OS command line. This issue affects Apache Kylin: from 4 through 5.0.3. Users are recommended to upgrade to version 5.0.4, which fixes the issue.

• CWE-78

• https://lists.apache.org/thread/9hof8lxo3mzshsh5r77mskzqlkns09gnMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2026/07/14/5Mailing List, Third Party Advisory

Published

Jul 14, 2026

Last Modified

Jul 15, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-62386The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-r…8.2
• CVE-2026-62387The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-r…7.1
• CVE-2026-62389Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-6239A stack‑based buffer overflow vulnerability exists in Tapo C…6.8
• CVE-2026-62390Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2026-62391The security fix for CVE-2025-66518 is incomplete. Any clien…8.1
• CVE-2026-62393Improper Handling of Insufficient Permissions or Privileges …4.3
• CVE-2026-6240A stack-based buffer overflow vulnerability exists in Tapo C…6.8
• CVE-2026-6241An authenticated format string vulnerability is present in t…6.8
• CVE-2026-62414Joomla Extension - joomlack.fr - Improper access control in …9.1
• CVE-2026-62415Joomla Extension - joomdonation.com - Insecure default confi…9.1
• CVE-2026-62416Network Scanner Tool and Network Scanner Tool Lite provided …6.9