CVE-2026-67342 ArcadeDB before 26.7.2 Authorization Bypass via Database Handlers

ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series, batch, Prometheus, and Grafana endpoints that fail to validate database access permissions. Attackers can access and modify databases they are not authorized to use by directly calling...

com.arcadedb:arcadedb-coverage (23.4.1), com.arcadedb:arcadedb-graphql (23.4.1) +4 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (23.4.1)

com.arcadedb:arcadedb-server MAVEN version 23.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 23.4.1 - com.arcadedb:arcadedb-graphql 23.4.1 -...

com.arcadedb:arcadedb-coverage (21.9.1-beta), com.arcadedb:arcadedb-mongodbw (21.9.1-beta) +3 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (21.9.1-beta)

com.arcadedb:arcadedb-server MAVEN version 21.9.1-beta is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 21.9.1-beta - com.arcadedb:arcadedb-mongodbw 21.9.1-beta -...

com.arcadedb:arcadedb-coverage (22.10.1), com.arcadedb:arcadedb-graphql (22.10.1) +4 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (22.10.1)

com.arcadedb:arcadedb-server MAVEN version 22.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 22.10.1 - com.arcadedb:arcadedb-graphql 22.10.1 -...

com.arcadedb:arcadedb-coverage (25.3.2), com.arcadedb:arcadedb-graphql (25.3.2) +6 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (25.3.2)

com.arcadedb:arcadedb-server MAVEN version 25.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 25.3.2 - com.arcadedb:arcadedb-graphql 25.3.2 -...

com.arcadedb:arcadedb-graphql (25.8.1), com.arcadedb:arcadedb-gremlin (25.8.1) +5 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (25.8.1)

com.arcadedb:arcadedb-server MAVEN version 25.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-graphql 25.8.1 - com.arcadedb:arcadedb-gremlin 25.8.1 -...

com.arcadedb:arcadedb-coverage (24.11.2), com.arcadedb:arcadedb-graphql (24.11.2) +5 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (24.11.2)

com.arcadedb:arcadedb-server MAVEN version 24.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 24.11.2 - com.arcadedb:arcadedb-graphql 24.11.2 -...

com.arcadedb:arcadedb-coverage (24.10.1), com.arcadedb:arcadedb-graphql (24.10.1) +3 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (24.10.1)

com.arcadedb:arcadedb-server MAVEN version 24.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 24.10.1 - com.arcadedb:arcadedb-graphql 24.10.1 -...

com.arcadedb:arcadedb-coverage (23.5.1), com.arcadedb:arcadedb-graphql (23.5.1) +4 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (23.5.1)

com.arcadedb:arcadedb-server MAVEN version 23.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 23.5.1 - com.arcadedb:arcadedb-graphql 23.5.1 -...

com.arcadedb:arcadedb-graphql (25.11.1), com.arcadedb:arcadedb-gremlin (25.11.1) +7 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (25.11.1)

com.arcadedb:arcadedb-server MAVEN version 25.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-graphql 25.11.1 - com.arcadedb:arcadedb-gremlin 25.11.1 -...

com.arcadedb:arcadedb-coverage (23.6.1), com.arcadedb:arcadedb-graphql (23.6.1) +4 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (23.6.1)

com.arcadedb:arcadedb-server MAVEN version 23.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 23.6.1 - com.arcadedb:arcadedb-graphql 23.6.1 -...

com.arcadedb:arcadedb-graphql (25.5.1), com.arcadedb:arcadedb-gremlin (25.5.1) +5 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (25.5.1)

com.arcadedb:arcadedb-server MAVEN version 25.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-graphql 25.5.1 - com.arcadedb:arcadedb-gremlin 25.5.1 -...

com.arcadedb:arcadedb-coverage (22.8.1), com.arcadedb:arcadedb-graphql (22.8.1) +4 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (22.8.1)

com.arcadedb:arcadedb-server MAVEN version 22.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 22.8.1 - com.arcadedb:arcadedb-graphql 22.8.1 -...

com.arcadedb:arcadedb-graphql (25.6.1), com.arcadedb:arcadedb-gremlin (25.6.1) +5 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (25.6.1)

com.arcadedb:arcadedb-server MAVEN version 25.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-graphql 25.6.1 - com.arcadedb:arcadedb-gremlin 25.6.1 -...

com.arcadedb:arcadedb-graphql (25.9.1), com.arcadedb:arcadedb-gremlin (25.9.1) +6 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (25.9.1)

com.arcadedb:arcadedb-server MAVEN version 25.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-graphql 25.9.1 - com.arcadedb:arcadedb-gremlin 25.9.1 -...

com.arcadedb:arcadedb-graphql (25.10.1), com.arcadedb:arcadedb-gremlin (25.10.1) +6 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (25.10.1)

com.arcadedb:arcadedb-server MAVEN version 25.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-graphql 25.10.1 - com.arcadedb:arcadedb-gremlin 25.10.1 -...

com.arcadedb:arcadedb-graphql (22.2.1), com.arcadedb:arcadedb-mongodbw (22.2.1) +3 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (22.2.1)

com.arcadedb:arcadedb-server MAVEN version 22.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-graphql 22.2.1 - com.arcadedb:arcadedb-mongodbw 22.2.1 -...