{"vulnerability": "CVE-2026-6239", "sightings": [{"uuid": "1034df5e-db7c-448f-bc28-bf3870bfc48d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62391", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/65sh4aa55lke2", "content": "CVE-2026-62391: Apache Kyuubi: kyuubi.session.local.dir.allow.list bypass via unprefixed Spark file-conf aliases", "creation_timestamp": "2026-07-31T11:36:23.259623Z"}, {"uuid": "aad26c77-bba6-4626-a57e-a5d5917ff4a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6239", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnlgskpkir2q", "content": "CVE-2026-6239 - Authenticated Stack-based Buffer Overflow in ONVIF CreateUsers Service in TP-Link Tao C520WS\nCVE ID : CVE-2026-6239\n \n Published : June 6, 2026, 12:16 a.m. | 16\u00a0minutes ago\n \n Description : A stack\u2011based\nbuffer overflow vulnerability exists in Tapo C520WS v2 in...", "creation_timestamp": "2026-06-06T00:52:29.515560Z"}, {"uuid": "5d59f206-2dee-4c4f-b671-50f5b1dec9c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62390", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mqlbxpp4fp2j", "content": "CVE-2026-62390: Apache Kylin: SQL Injection Vulnerability in Catalog Cache Refresh API", "creation_timestamp": "2026-07-14T03:41:28.426497Z"}, {"uuid": "d8e683f5-fdf5-4c3a-a863-0e817a68ec9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62392", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mqle5fo5ev23", "content": "CVE-2026-62392: Apache Kylin: OS Command Injection via Async Query API", "creation_timestamp": "2026-07-14T04:20:27.364525Z"}, {"uuid": "5f72c591-83cf-4215-b2ad-ed08b46182a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62393", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mqlfb7cxfr2q", "content": "CVE-2026-62393: Apache Kylin: Improper authorization in job information retrieval", "creation_timestamp": "2026-07-14T04:40:28.144791Z"}, {"uuid": "8da7c517-2cd2-4bd2-9beb-32e571839a32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62390", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqmqeyjaxl2z", "content": "CVE-2026-62390 - apache kylin\nApache Kylin versions 4 through 5.0.3 are at risk of a security threat. An attacker could potentially inject malicious SQL code, which could lead to unauthorized\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachekylin #apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-14T17:32:06.000111Z"}, {"uuid": "cc5e287b-b627-4287-b753-4e6338fc9e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62392", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqnqj744cc2n", "content": "\ud83d\udccc CVE-2026-62392 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin. A backend API may bring job ... https://www.cyberhub.blog/cves/CVE-2026-62392", "creation_timestamp": "2026-07-15T03:07:08.011173Z"}, {"uuid": "62572b67-d918-44cb-b57b-e2cebd44d09c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62390", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqnotjj6jj23", "content": "\ud83d\udccc CVE-2026-62390 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin. A backend API refreshing table cat... https://www.cyberhub.blog/cves/CVE-2026-62390", "creation_timestamp": "2026-07-15T02:37:06.108960Z"}, {"uuid": "0d13e953-16cf-4afe-b4d0-09739044b263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62392", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5gb5opdr2a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-62392 \u0432 Apache Kylin: \u0443\u0433\u0440\u043e\u0437\u0430 OS Command Injection \u0447\u0435\u0440\u0435\u0437 Async Query API\n\n\n\nhttps://kripta.biz/posts/E46FA03A-1856-47C7-B4A8-DAE4FB117E0A", "creation_timestamp": "2026-07-21T08:46:15.746858Z"}, {"uuid": "f14ecc5f-1711-4a11-81cb-2904179e507b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62393", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5gjcoqlw2h", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-62393 \u0432 Apache Kylin: \u0440\u0438\u0441\u043a\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/152ABA96-FCF5-4654-AD76-903BF428F175", "creation_timestamp": "2026-07-21T08:50:49.023097Z"}, {"uuid": "2afc7e23-cc21-4af9-8bdd-e7d01ec6c30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62393", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mr5gqyraiv25", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05d1\u05d1\u05d9\u05d8\u05d7\u05d5\u05df \u05d1\u05d0\u05e4\u05d0\u05e6'\u05d9 \u05e7\u05d9\u05dc\u05d9\u05df - CVE-2026-62393\n\n\n\nhttps://khesef.xyz/posts/136E9D7C-ACF7-47E0-B156-D3A91405A012", "creation_timestamp": "2026-07-21T08:55:07.504685Z"}, {"uuid": "24070826-511e-4422-a904-a8571bce7598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62391", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mujvgkhxfs2j", "content": "\u300cApache Kyuubi\u300d\u306b3\u4ef6\u306e\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u304c\u516c\u958b\n\n\u300cApache Spark\u300d\u306a\u3069\u306e\u51e6\u7406\u30a8\u30f3\u30b8\u30f3\u3092\u5229\u7528\u3057\u305fSQL\u51e6\u7406\u3084\u30d0\u30c3\u30c1\u51e6\u7406\u306e\u305f\u3081\u306e\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u3092\u63d0\u4f9b\u3059\u308b\u300cApache Kyuubi\u300d\u306b3\u4ef6\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002\u4fee\u6b63\u7248\u304c\u63d0\u4f9b\u3055\u308c\u3066\u304a\u308a\u3001\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u547c\u3073\u304b\u3051\u3089\u308c\u3066\u3044\u308b\u3002\n\n...\n\n\u300cCVE-2026-62391\u300d\u306f\u3001\u300cCVE-2025-66518\u300d\u306e\u4fee\u6b63\u304c\u4e0d\u5b8c\u5168\u3060\u3063\u305f\u3053\u3068\u306b\u8d77\u56e0\u3057\u3001\u30ed\u30fc\u30ab\u30eb\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306e\u8a31\u53ef\u30ea\u30b9\u30c8\u3092\u56de\u907f\u3067\u304d\u308b\u8106\u5f31\u6027\u3002\u30b5\u30fc\u30d0\u30b5\u30a4\u30c9\u30ea\u30af\u30a8\u30b9\u30c8\u30d5\u30a9\u30fc\u30b8\u30a7\u30ea\uff08SSRF\uff09\u3084\u30aa\u30fc\u30d7\u30f3\u30d7\u30ed\u30ad\u30b7\u3068\u3057\u3066\u60aa\u7528\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u300cCVE-2026-23904\u300d\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3002", "creation_timestamp": "2026-09-02T12:05:14.822389Z"}]}