CVE-2026-76224

creationtimestamp| type| source ---|---|--- 2026-08-20 04:10:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtiesukqwr2p...

CVE-2026-76224 ArcadeDB before 26.8.1 Remote Code Execution via Groovy Fallback

ArcadeDB before 26.8.1 arcadedb-gremlin, affected = 26.7.3 contains a remote code execution vulnerability in its Gremlin query engine. Although the engine defaults to the documented-secure java gremlin-lang engine, ArcadeGremlin.executeStatement silently falls back to the insecure Groovy engine...