Known vulnerabilities in Apache Kyuubi
Vendor:
Apache Foundation
Software:
Apache Kyuubi
Software CPE:
cpe:2.3:a:apache_foundation:kyuubi:*:*:*:*:*:*:*:*
Website:
https://www.apache.org
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU145164 - Improper Access Control CVE-2026-62391 |
CWE-284 | Low | 1.12.0 | 25.08.2026 |
SB2026082553 |
||
| #VU145163 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-52680 |
CWE-22 | Medium | 1.12.0 | 25.08.2026 |
SB2026082553 |
||
| #VU145162 - Improper Access Control CVE-2026-23904 |
CWE-284 | Medium | 1.12.0 | 25.08.2026 |
SB2026082553 |
||
| #VU121170 - Missing Authorization CVE-2025-66518 |
CWE-862 | Medium | 1.10.3 | 12.01.2026 |
SB2026011244 |