FAIL › dossier
Kylin
PRODUCT· dossier confidence 20%
Kylin OS is a Chinese operating system with a documented history of critical and high-severity vulnerabilities, including remote code execution and injection flaws, suggesting ongoing challenges in patch management and secure coding practices.
PROFILE
Categoryoperating systemWhat they doKylin is an operating system developed by Kylin Software Technology Co., Ltd., primarily used in government and defense sectors in China.
Websitehttps://www.kylinos.cn ↗
SECURITY POSTURE
The company has a history of critical and high-severity vulnerabilities, including remote code execution and SQL/OS command injection flaws, indicating potential gaps in patch management and input validation.
Notable failures
- CVE-2020-1956: unpatched command injection RCE
- CVE-2026-62390: SQL injection
- CVE-2026-62392: OS command injection
Patterns: repeated unpatched injection flaws; critical vulnerabilities in core components
FAILURE HISTORY · 3
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2022-03-25 | CVE-2020-1956 | high | Apache Kylin OS had an unpatched command injection flaw allowing remote code execution. |
| 2026-07-14 | CVE-2026-62390 | critical | CVE-2026-62390: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti |
| 2026-07-14 | CVE-2026-62392 | critical | CVE-2026-62392: Improper Neutralization of Special Elements used in an OS Command ('OS Command I |
DOSSIER SOURCES
- Kylin - Products, Competitors, Financials, Employees, Headquarters ... · www.cbinsights.com
- Kylin - 2025 Company Profile, Funding & Competitors - Tracxn · tracxn.com
Open questions: Current patch management processes · Recent vulnerability disclosures post-2026
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-31 04:00:33.490599+00:00