CVE-2026-40008

The Apache IoTDB data management system (versions 1.0.0 before 2.0.10 ) is vulnerable to Unsafe Reflection (CWE-470 ) in its pipe processor. The component fails to validate or allowlist a fully qualified Java class name received from a Pipe Transfer RPC request, subsequently instantiating it usin...