PT-2026-100944

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100380

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101693

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100434

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101364

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-102065

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

thingsboard v4.3.1.5

All-in-one IoT platform for data collection, processing, visualization, and device management. 💡 Get started • 🌐 Website • 📚 Documentation • 📔 Blog • 🔗 LinkedIn 🚀 Installation options Install ThingsBoard on-premises or use ThingsBoard Cloud. 💡 Getting started with ThingsBoard Check out our Gettin...

GHSA-9XV2-5V5Q-P794 vulnerabilities

Vulnerabilities for packages: thingsboard...

CVE-2026-65182 vulnerabilities

Vulnerabilities for packages: thingsboard...

GHSA-H3X4-894J-XPX5 vulnerabilities

Vulnerabilities for packages: thingsboard...

CVE-2026-65905 vulnerabilities

Vulnerabilities for packages: thingsboard...

CVE-2026-68525 vulnerabilities

Vulnerabilities for packages: thingsboard...

GHSA-GCX9-497G-6CP6 vulnerabilities

Vulnerabilities for packages: thingsboard...

thingsboard v4.3.1.4

Open-source IoT platform for data collection, processing, visualization, and device management. 💡 Get started • 🌐 Website • 📚 Documentation • 📔 Blog • 🔗 LinkedIn 🚀 Installation options Install ThingsBoard on-premises or use ThingsBoard Cloud. 💡 Getting started with ThingsBoard Check out our Getti...

CVE-2025-70340

A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...

CVE-2025-70340: Improper Access Control

A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...

EUVD-2025-210791

A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...

CVE-2025-70340

A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...

CVE-2025-70340

A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...

CVE-2025-70340

A Broken Access Control vulnerability exists in ThingsBoard Professional Edition (PE) 4.21 and below within the Alarms comments functionality. An authenticated customer user can manipulate API request parameters to create or modify system-generated alarm comments. This flaw allows for unauthorize...