https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T05:13:24.226777+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-04473 bdu:2020-04473 2026-10-09T05:13:24.230329+00:00 bdu:2020-04473 https://cve.radiocsirt.org/vuln/euvd-2026-256101 EUVD-2026-256101 2026-10-09T05:13:24.230377+00:00 EUVD-2026-256101 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1956 fkie_cve-2020-1956 2026-10-09T05:13:24.230393+00:00

Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation.

 https://cve.radiocsirt.org/vuln/ghsa-gprm-xqrc-c2j3 GHSA-gprm-xqrc-c2j3 — Command Injection in Kylin 2026-10-09T05:13:24.230425+00:00

Affected: Maven: org.apache.kylin:kylin-core-common

Kylin has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation.

 https://cve.radiocsirt.org/vuln/gsd-2020-1956 gsd-2020-1956 2026-10-09T05:13:24.230450+00:00 gsd-2020-1956