Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-93598
  • github.com/arcadedata/arcadedb
 ArcadeDB before 26.9.1 Classpath Credential Disclosure via ResourceBundle 18 Sep
  • Fix available
  • Severity - 7.1 (High)
CVE-2026-93597
  • github.com/arcadedata/arcadedb
 ArcadeDB before 26.9.1 SSRF via IPv6 transition addresses 18 Sep
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2026-93596
  • github.com/arcadedata/arcadedb
 ArcadeDB before 26.9.1 Authorization Bypass via Batch Edge Connect 18 Sep
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2026-93595
  • github.com/arcadedata/arcadedb
 ArcadeDB before 26.9.1 ACL Bypass via query_database Tool 18 Sep
  • Fix available
  • Severity - 7.1 (High)
CVE-2026-93594
  • github.com/arcadedata/arcadedb
 ArcadeDB before 26.9.1 ACL Bypass via Index and TimeSeries 18 Sep
  • Fix available
  • Severity - 7.1 (High)
CVE-2026-93593
  • github.com/arcadedata/arcadedb
 ArcadeDB before 26.9.1 TimeSeries ACL Bypass via Type Permission 18 Sep
  • Fix available
  • Severity - 8.6 (High)
CVE-2026-65831
  • github.com/arcadedata/arcadedb
 ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file read 15 Sep
  • Fix available
  • Severity - 7.7 (High)
CVE-2026-54077
  • github.com/arcadedata/arcadedb
 ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users 15 Sep
  • Fix available
  • Severity - 7.1 (High)
CVE-2026-54076
  • github.com/arcadedata/arcadedb
 ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221) 15 Sep
  • Fix available
  • Severity - 8.1 (High)
CVE-2026-76225
  • github.com/arcadedata/arcadedb
 ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSV 19 Aug
  • Fix available
  • Severity - 8.3 (High)
CVE-2026-76224
  • github.com/arcadedata/arcadedb
 ArcadeDB before 26.8.1 Remote Code Execution via Groovy Fallback 19 Aug
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-76223
  • github.com/arcadedata/arcadedb
 ArcadeDB before 26.8.1 Permission Bypass via DEFINE FUNCTION 19 Aug
  • Fix available
  • Severity - 7.1 (High)
CVE-2026-75855
  • github.com/arcadedata/arcadedb
 ArcadeDB before 26.8.1 Path Traversal via create/drop database 18 Aug
  • Fix available
  • Severity - 8.4 (High)
CVE-2026-75854
  • github.com/arcadedata/arcadedb
 ArcadeDB Redis Wire-Protocol Plugin Missing Authentication 18 Aug
  • Fix available
  • Severity - 9.3 (Critical)
CVE-2026-75853
  • github.com/arcadedata/arcadedb
 ArcadeDB Gremlin Wire Protocol Authorization Bypass Cross-Database 18 Aug
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-75852
  • github.com/arcadedata/arcadedb
 ArcadeDB MongoDB wire protocol authentication bypass cross-database 18 Aug
  • Fix available
  • Severity - 9.3 (Critical)
Load more...