CVE-2026-75841

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-75841
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-75841.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-75841
Aliases
  • GHSA-xmjm-8q85-g778
Published
2026-08-18T11:19:49Z
Modified
2026-09-10T03:30:43Z
Severity
  • 5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Summary
ArcadeDB before 26.8.1 Denial of Service via range()
Details

ArcadeDB before 26.8.1 contains a denial of service vulnerability in the Cypher range() function that allows authenticated users to exhaust server heap memory. Attackers can submit oversized range() expressions with large bounds to trigger OutOfMemoryError and cause temporary service degradation or unavailability.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-770"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/75xxx/CVE-2026-75841.json"
}
References

Affected packages

Git / github.com/arcadedata/arcadedb

Affected ranges

Type
GIT
Repo
https://github.com/arcadedata/arcadedb
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
87bdc67f1f0331fa2d07e932a550064c118eae70
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "26.8.1"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "DESCRIPTION"
    ]
}

Affected versions

21.*
21.10.1
21.10.2
21.11.1
21.12.1
21.9.1
22.*
22.1.2
22.1.3
22.10.1
22.11.1
22.12.1
22.2.1
22.6.1
22.8.1
22.9.1
23.*
23.1.1
23.1.2
23.10.1
23.11.1
23.12.1
23.12.2
23.2.1
23.3.1
23.4.1
23.5.1
23.6.1
23.7.1
23.9.1
24.*
24.1.1
24.10.1
24.11.1
24.11.2
24.2.1
24.4.1
24.5.1
24.6.1
25.*
25.1.1
25.10.1
25.11.1
25.12.1
25.2.1
25.3.1
25.3.2
25.4.1
25.6.1
25.7.1
25.8.1
25.9.1
26.*
26.1.1
26.2.1
26.3.1
26.3.2
26.4.2
26.5.1
26.6.1
26.7.1
26.7.2
Other
untagged-3026f5635164cd300b5b

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-75841.json"