CVE-2026-75851

ArcadeDB server com.arcadedb:arcadedb-server in versions 26.7.3 and earlier fails to propagate the authenticated principal to asynchronous command worker threads. When an HTTP command is submitted with awaitResponse:false, it executes on an async worker whose DatabaseContext has no bound user,...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.7.3), com.arcadedb:arcadedb-coverage (>=21.9.1-beta, <=25.4.1) +12 more potentially affected by CVE-2026-75851 via com.arcadedb:arcadedb-server (>=21.9.1-beta, <=26.7.3)

com.arcadedb:arcadedb-server MAVEN version =21.9.1-beta, =26.2.1, =21.9.1-beta, =21.12.1, =24.11.1, =25.9.1, =26.4.2, =25.1.1, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =25.11.1, =26.7.1, =26.7.3 - io.github.mdre:adbogm 0.9.0.6 Source cves: CVE-2026-75851 Source advisory:...

com.arcadedb:arcadedb-bolt (>=26.4.2, <=26.7.3), com.arcadedb:arcadedb-graphql (>=26.4.2, <=26.7.3) +10 more potentially affected by CVE-2026-75845 via com.arcadedb:arcadedb-server (>=26.4.2, <=26.7.3)

com.arcadedb:arcadedb-server MAVEN version =26.4.2, =26.4.2, =26.4.2, =26.4.2, =26.4.2, =26.4.2, =26.4.2, =26.4.2, =26.4.2, =26.4.2, =26.4.2, =26.4.2, =26.7.1, =26.7.3 Source cves: CVE-2026-75845 Source advisory: MEND:CVE-2026-75845...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.7.3), com.arcadedb:arcadedb-coverage (>=21.9.1-beta, <=25.4.1) +12 more potentially affected by CVE-2026-75841 via com.arcadedb:arcadedb-server (>=21.9.1-beta, <=26.7.3)

com.arcadedb:arcadedb-server MAVEN version =21.9.1-beta, =26.2.1, =21.9.1-beta, =21.12.1, =24.11.1, =25.9.1, =26.4.2, =25.1.1, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =25.11.1, =26.7.1, =26.7.3 - io.github.mdre:adbogm 0.9.0.6 Source cves: CVE-2026-75841 Source advisory:...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.7.3), com.arcadedb:arcadedb-coverage (>=21.9.1-beta, <=25.4.1) +12 more potentially affected by CVE-2026-75839 via com.arcadedb:arcadedb-server (>=21.9.1-beta, <=26.7.3)

com.arcadedb:arcadedb-server MAVEN version =21.9.1-beta, =26.2.1, =21.9.1-beta, =21.12.1, =24.11.1, =25.9.1, =26.4.2, =25.1.1, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =25.11.1, =26.7.1, =26.7.3 - io.github.mdre:adbogm 0.9.0.6 Source cves: CVE-2026-75839 Source advisory:...

CVE-2026-75851: Improper Privilege Management

ArcadeDB server com.arcadedb:arcadedb-server in versions 26.7.3 and earlier fails to propagate the authenticated principal to asynchronous command worker threads. When an HTTP command is submitted with awaitResponse:false, it executes on an async worker whose DatabaseContext has no bound user,...

com.arcadedb:arcadedb-bolt (>=26.3.2, <=26.7.2), com.arcadedb:arcadedb-graphql (>=26.3.2, <=26.7.2) +10 more potentially affected by CVE-2026-67357 via com.arcadedb:arcadedb-server (>=26.3.2, <=26.7.2)

com.arcadedb:arcadedb-server MAVEN version =26.3.2, =26.3.2, =26.3.2, =26.3.2, =26.3.2, =26.4.2, =26.3.2, =26.3.2, =26.3.2, =26.3.2, =26.3.2, =26.3.2, =26.7.1, =26.7.2 Source cves: CVE-2026-67357 Source advisory: MEND:CVE-2026-67357...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.7.1), com.arcadedb:arcadedb-coverage (>=21.9.1-beta, <=25.4.1) +12 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (>=21.9.1-beta, <=26.7.1)

com.arcadedb:arcadedb-server MAVEN version =21.9.1-beta, =26.2.1, =21.9.1-beta, =21.12.1, =24.11.1, =25.9.1, =26.4.2, =25.1.1, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =25.11.1, =26.5.1 - com.arcadedb:arcadedb-tracing 26.7.1 - io.github.mdre:adbogm 0.9.0.6 Source cves: CVE-2026-673...

com.arcadedb:arcadedb-coverage (23.1.2), com.arcadedb:arcadedb-graphql (23.1.2) +4 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (23.1.2)

com.arcadedb:arcadedb-server MAVEN version 23.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 23.1.2 - com.arcadedb:arcadedb-graphql 23.1.2 -...

com.arcadedb:arcadedb-coverage (21.9.1-beta), com.arcadedb:arcadedb-mongodbw (21.9.1-beta) +3 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (21.9.1-beta)

com.arcadedb:arcadedb-server MAVEN version 21.9.1-beta is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 21.9.1-beta - com.arcadedb:arcadedb-mongodbw 21.9.1-beta -...

com.arcadedb:arcadedb-coverage (21.11.1), com.arcadedb:arcadedb-mongodbw (21.11.1) +3 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (21.11.1)

com.arcadedb:arcadedb-server MAVEN version 21.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 21.11.1 - com.arcadedb:arcadedb-mongodbw 21.11.1 -...

com.arcadedb:arcadedb-coverage (21.12.1), com.arcadedb:arcadedb-graphql (21.12.1) +1 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (21.12.1)

com.arcadedb:arcadedb-server MAVEN version 21.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 21.12.1 - com.arcadedb:arcadedb-graphql 21.12.1 -...

com.arcadedb:arcadedb-graphql (22.1.3), com.arcadedb:arcadedb-mongodbw (22.1.3) +3 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (22.1.3)

com.arcadedb:arcadedb-server MAVEN version 22.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-graphql 22.1.3 - com.arcadedb:arcadedb-mongodbw 22.1.3 -...

com.arcadedb:arcadedb-coverage (22.10.1), com.arcadedb:arcadedb-graphql (22.10.1) +4 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (22.10.1)

com.arcadedb:arcadedb-server MAVEN version 22.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 22.10.1 - com.arcadedb:arcadedb-graphql 22.10.1 -...

com.arcadedb:arcadedb-coverage (22.12.1), com.arcadedb:arcadedb-graphql (22.12.1) +4 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (22.12.1)

com.arcadedb:arcadedb-server MAVEN version 22.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 22.12.1 - com.arcadedb:arcadedb-graphql 22.12.1 -...

com.arcadedb:arcadedb-coverage (23.5.1), com.arcadedb:arcadedb-graphql (23.5.1) +4 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (23.5.1)

com.arcadedb:arcadedb-server MAVEN version 23.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 23.5.1 - com.arcadedb:arcadedb-graphql 23.5.1 -...

com.arcadedb:arcadedb-coverage (23.7.1), com.arcadedb:arcadedb-graphql (23.7.1) +4 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (23.7.1)

com.arcadedb:arcadedb-server MAVEN version 23.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 23.7.1 - com.arcadedb:arcadedb-graphql 23.7.1 -...

com.arcadedb:arcadedb-coverage (23.9.1), com.arcadedb:arcadedb-graphql (23.9.1) +4 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (23.9.1)

com.arcadedb:arcadedb-server MAVEN version 23.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 23.9.1 - com.arcadedb:arcadedb-graphql 23.9.1 -...

com.arcadedb:arcadedb-coverage (24.4.1), com.arcadedb:arcadedb-graphql (24.4.1) +4 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (24.4.1)

com.arcadedb:arcadedb-server MAVEN version 24.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 24.4.1 - com.arcadedb:arcadedb-graphql 24.4.1 -...

com.arcadedb:arcadedb-coverage (25.3.2), com.arcadedb:arcadedb-graphql (25.3.2) +6 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (25.3.2)

com.arcadedb:arcadedb-server MAVEN version 25.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 25.3.2 - com.arcadedb:arcadedb-graphql 25.3.2 -...