CVE-2026-75852

creationtimestamp| type| source ---|---|--- 2026-08-18 12:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mte7bcrakz2u 2026-08-18 12:21:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fu7vddkxv5wio 2026-08-18 12:38:18+00:00| seen|...

CVE-2026-75852

ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, delete, and create commands against any database by connecting to port 27017 without credentials...

CVE-2026-75852 ArcadeDB MongoDB wire protocol authentication bypass cross-database

ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in the MongoDB wire-protocol plugin. Unauthenticated attackers can issue insert, find, update, delete, and create commands against any database by connecting to port 27017 without credentials...