{"metadata": {"vulnerability": "cve-2026-64959", "count": 16, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 9}}, "data": [{"timestamp": "2026-07-21T09:16:04.860Z", "date_only": false, "value": "2026-07-21T09:16:04.860Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-64959", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-16T04:17:22.082Z", "date_only": false, "value": "2026-10-16T04:17:22.082136Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/b5ds4httaov2y", "record": "CVE-2026-64959", "field": "creation_timestamp", "uuid": "2ae877e8-8483-4835-ac2d-a73cbe01fb26", "content": "CVE-2026-64959: Apache Kylin: Missing authentication on certain cache API endpoints", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/b5ds4httaov2y"}, {"timestamp": "2026-10-16T12:16:00.359Z", "date_only": false, "value": "2026-10-16T12:16:00.359Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-64959", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T12:16:00.359Z", "date_only": false, "value": "2026-10-16T12:16:00.359Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "cve-2026-64959", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T12:38:49.951Z", "date_only": false, "value": "2026-10-16T12:38:49.951206Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117450626136789678", "record": "CVE-2026-64959", "field": "creation_timestamp", "uuid": "7c392a95-8ef9-4be5-87c0-7a9edbb461c8", "content": "CVE-2026-64959 Apache Kylin: Missing authentication on certain cache API endpoints Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Missing Authentication for Critical Function vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted.\nThis issue affects Apache Kylin: from 5 through 5.0.4. Certain backend cache API misses required authentication and can cause execution of injected SQL.\nUsers are recommended to upgrade to version 5.0.5, which fixes the issue.\nhttps://www.cve.org/CVERecord?id=CVE-2026-64959https://lists.apache.org/thread.html/oho4tw8kvxkybwpjykzl49zx6o17tkdt#apache #ApacheSoftwareFoundation #ApacheKylin#CVE_2026_64959#bot", "url": "https://infosec.exchange/users/cve/statuses/117450626136789678"}, {"timestamp": "2026-10-16T13:12:57.606Z", "date_only": false, "value": "2026-10-16T13:12:57.606Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2026-64959", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T13:16:57Z", "date_only": false, "value": "2026-10-16T13:16:57Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GG28-7V75-7G84", "record": "GHSA-GG28-7V75-7G84", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-16T13:16:57.480Z", "date_only": false, "value": "2026-10-16T13:16:57.480", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-64959", "record": "FKIE_CVE-2026-64959", "field": "published"}, {"timestamp": "2026-10-16T15:38:45Z", "date_only": false, "value": "2026-10-16T15:38:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GG28-7V75-7G84", "record": "GHSA-GG28-7V75-7G84", "field": "published"}, {"timestamp": "2026-10-19T00:25:34.975Z", "date_only": false, "value": "2026-10-19T00:25:34.975829Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3my6uapr7oj2f", "record": "CVE-2026-64959", "field": "creation_timestamp", "uuid": "7598ee8f-6b04-4d42-9a13-574dbbd64963", "content": "Apache fixes 12 Apache Kylin vulnerabilities, including critical CVE-2026-64959, plus Apache Airflow SSH flaws. Upgrade Kylin to 5.0.5 now.\n\n#ApacheKylin #ApacheAirflow #ApacheAnswer #CVE202664959 #CVE202668571 #CVE202694134 #SQLInjection #CyberSecurity", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3my6uapr7oj2f"}, {"timestamp": "2026-10-20T15:18:29.876Z", "date_only": false, "value": "2026-10-20T15:18:29.876060Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-64959", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-20T15:18:29.876Z", "date_only": false, "value": "2026-10-20T15:18:29.876060Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-64959", "record": "FKIE_CVE-2026-64959", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-20T15:18:33.054Z", "date_only": false, "value": "2026-10-20T15:18:33.054Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-64959", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-20T15:18:33.054Z", "date_only": false, "value": "2026-10-20T15:18:33.054Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-64959", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-20T16:17:14.950Z", "date_only": false, "value": "2026-10-20T16:17:14.950", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-64959", "record": "FKIE_CVE-2026-64959", "field": "lastModified"}, {"timestamp": "2026-10-20T18:31:37Z", "date_only": false, "value": "2026-10-20T18:31:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GG28-7V75-7G84", "record": "GHSA-GG28-7V75-7G84", "field": "modified"}]}