DataLinkDC Dinky

• CVE-2026-122009 High 7.3 DataLinkDC Dinky flink_web Proxy Endpoint FlinkWebURITemplateProxyServlet.java FlinkWebURITemplateProxyServlet.getNewTargetUri server-side request forgery 0.5%
• CVE-2026-70559 High 7.5 Dinky Unauthenticated System Configuration and Credential Disclosure via GET /api/sysConfig/getAll 0.5%
• CVE-2026-70558 Critical 9.8 Dinky Unauthenticated Arbitrary File Write via /download/uploadFromRsByLocal Gated Only by Hardcoded Default Token 0.8%
• CVE-2026-3053 High 7.3 DataLinkDC dinky OpenAPI Endpoint AppConfig.java addInterceptors missing authentication 0.8%
• CVE-2026-3052 Medium 6.3 DataLinkDC dinky Flink Proxy Controller FlinkProxyController.java proxyUba server-side request forgery 0.3%
• CVE-2026-3051 Medium 6.3 DataLinkDC dinky Project Name GitRepository.java getProjectDir path traversal 7.3%