CVE-2026-53676

ThingsBoard contains a prototype pollution vulnerability which may lead to arbitrary code execution within a sandboxed context by a user who can log in to the affected product with the tenant administrator privilege TENANTADMIN...

ThingsBoard vulnerable to prototype pollution

Overview ThingsBoard contains the following vulnerability Prototype Pollution CWE-1321 - CVE-2026-53676 HIROKI IMAI of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact Arbitrary code may be...

CVE-2026-53676

creationtimestamp| type| source ---|---|--- 2026-06-15 20:00:15+00:00| seen| https://jvn.jp/en/jp/JVN16937365 2026-06-17 23:44:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mojilisvew2e...