Class familyApache · Kylin
Apache Kylin OS command injection flaws, 2020–2026
3 Kylin CVEs with CWE-78 weaknesses, 22 May 2020 to 16 Oct 2026. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2020’20
2021’21
2022’22
2023’23
2024’24
2025’25
2 2026’26
In CISA KEVNot in KEV
20201 CVE, 1 in KEV
20262 CVEs
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2020-1956KEV | 22 May 2020 | Apache Kylin OS Command Injection Vulnerability | Grouped by weakness | 69.1 |
| CVE-2026-62392 | 14 Jul 2026 | Apache Kylin: OS Command Injection via Async Query API | Grouped by weakness | 23.1 |
| CVE-2026-108743 | 16 Oct 2026 | Apache Kylin: spark job OS command injection | Grouped by weakness | 20.6 |