CVE-2026-62393
Medium · 4.3CVSS
4.3
EPSS
0.5%
Published
Jul 14, 2026
CISA due date
—
The record
Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin. Improper authorization in job information retrieval, where an attacker may get access to unauthorized jobs in other projects. This issue affects Apache Kylin: from 4 through 5.0.3. Users are recommended to upgrade to version 5.0.4, which fixes the issue.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-3322 Due to improper permission checks in Lobster_pro, attackers are able to interact with… CWE-280
- CVE-2026-21099 Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local… CWE-280
- CVE-2026-58416 Fork-PR Actions task can read a third private repository via the collaborative-owner… CWE-280
- CVE-2026-73239 Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple… CWE-280
- CVE-2026-18860 Velociraptor allows multi-tenant deployments named "Orgs". CWE-280
- CVE-2026-45196 Kernel software installed and running inside a Host VM may post improper commands to the… CWE-280
- CVE-2026-20463 In Modem, there is a possible escalation of privilege due to a permissions bypass. CWE-280
- CVE-2026-45195 Kernel software installed and running inside a Host VM may post improper commands to the… CWE-280