Home › CVE Intelligence › CVE-2026-23904
CVSS 6.1 MEDIUM Ransomware Campaign

CVE-2026-23904: Apache Kyuubi: Unrestricted access via Kyuubi engine-ui proxy

Posted by Akira Ajisaka on Jul 29 Severity: moderate Affected versions: Apache Kyuubi (org.apache.kyuubi:kyuubi-server) 1.8.0 before 1.12.0 Description: Kyuubi Engine UI proxy accepts a host and port from the request pa…

6.1CVSS Score
MEDIUMSeverity
NOCISA KEV
Ransomware CampaignImpact Type

📋 Vulnerability Details

CVE IDCVE-2026-23904
VendorMultiple Vendors
Affected ProductMultiple Products
Vulnerability TypeRansomware Campaign
CVSS Score6.1 (MEDIUM)
Actively Exploited❌ No known exploitation
Patch StatusPending Vendor Disclosure
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence (via sentinel_apex)

🔬 Technical Analysis

Posted by Akira Ajisaka on Jul 29 Severity: moderate

Affected versions:

• Apache Kyuubi (org.apache.kyuubi:kyuubi-server) 1.8.0 before 1.12.0

Description:

Kyuubi Engine UI proxy accepts a host and port from the request path and proxies HTTP requests to that destinatio... [Full analysis available on Pro]

⚡ DETECTION RULES AVAILABLE

Get CVE-2026-23904 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API →

🔗 Related Intelligence