CVE-2025-70340: Improper Access Control

A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...

CVE-2026-59902 vulnerabilities

Vulnerabilities for packages: celeborn, thingsboard, hadoop-fips, management-api-for-apache-cassandra-4.0, tinkerpop, seata, trino, pinot, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, tez, pinot-fips, apache-hop-fips...

GHSA-2QJ4-MMR9-4V2F vulnerabilities

Vulnerabilities for packages: celeborn, thingsboard, hadoop-fips, management-api-for-apache-cassandra-4.0, tinkerpop, seata, trino, pinot, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, tez, pinot-fips, apache-hop-fips...

CVE-2026-73569 vulnerabilities

Vulnerabilities for packages: tileserver-gl, kibana, langfuse, jitsucom-jitsu, langfuse-fips, tileserver-gl-fips, thingsboard-fips...

CVE-2026-73507 vulnerabilities

Vulnerabilities for packages: thingsboard, hadoop-fips, tinkerpop, seata, management-api-for-apache-cassandra-5.0, apache-hop, tez, apache-hop-fips...

CVE-2026-73507 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, thingsboard, tez...

CVE-2026-73508 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, apache-pulsar, thingsboard, druid, akhq, apicurio-registry, apache-nifi, opensearch, spark, zipkin, tez, strimzi-kafka-operator, keycloak, celeborn...

CVE-2026-54399 vulnerabilities

Vulnerabilities for packages: flyway, cassandra-reaper, thingsboard, druid, akhq, apicurio-registry, nrjmx, opensearch, zipkin, logstash, kserve-modelmesh, wavefront-proxy, sonarqube...

GHSA-HF6X-8P5F-CGMF vulnerabilities

Vulnerabilities for packages: flyway, cassandra-reaper, thingsboard, druid, akhq, apicurio-registry, nrjmx, opensearch, zipkin, logstash, kserve-modelmesh, wavefront-proxy, sonarqube...

CLEANSTART-2026-JB93591 Security fixes in thingsboard 4.3.1.3-r4

Package thingsboard version 4.3.1.3-r4 fixes 4 vulnerabilities: CVE-2026-59869, ghsa-52cp-r559-cp3m, ghsa-h67p-54hq-rp68, CVE-2026-53550...

CLEANSTART-2026-UB39790 Security fixes in thingsboard 4.3.1.3-r6

Package thingsboard version 4.3.1.3-r6 fixes 4 vulnerabilities: CVE-2026-59869, ghsa-52cp-r559-cp3m, ghsa-h67p-54hq-rp68, CVE-2026-53550...

CLEANSTART-2026-YC09522 Security fixes in thingsboard 4.3.1.3-r5

Package thingsboard version 4.3.1.3-r5 fixes 4 vulnerabilities: CVE-2026-59869, ghsa-52cp-r559-cp3m, ghsa-h67p-54hq-rp68, CVE-2026-53550...

CLEANSTART-2026-RI62285 Security fixes in thingsboard 4.3.1.3-r3

Package thingsboard version 4.3.1.3-r3 fixes 4 vulnerabilities: CVE-2026-59869, ghsa-52cp-r559-cp3m, ghsa-h67p-54hq-rp68, CVE-2026-53550...

CLEANSTART-2026-DE16547 Security fixes in thingsboard 4.3.1.3-r2

Package thingsboard version 4.3.1.3-r2 fixes 4 vulnerabilities: ghsa-j92g-9f8w-j867, CVE-2026-54291, ghsa-v422-hmwv-36x6, CVE-2026-12590...

CLEANSTART-2026-GY63167 Security fixes in thingsboard 4.3.1.3-r1

Package thingsboard version 4.3.1.3-r1 fixes 82 vulnerabilities: ghsa-r29c-68gh-xp6x, ghsa-h6fc-48rj-7qqh, ghsa-5m62-pw8w-7w9f, ghsa-gx5v-xp9w-j4cg, ghsa-fv25-8xcx-gqjc...

CLEANSTART-2026-SE70344 Security fixes in thingsboard 4.2.2.3-r1

Package thingsboard version 4.2.2.3-r1 fixes 84 vulnerabilities: ghsa-r29c-68gh-xp6x, ghsa-h6fc-48rj-7qqh, ghsa-5m62-pw8w-7w9f, ghsa-gx5v-xp9w-j4cg, ghsa-fv25-8xcx-gqjc...

PT-2026-86031

Package thingsboard version 4.2.2.3-r1 fixes 84 vulnerabilities: ghsa-r29c-68gh-xp6x, ghsa-h6fc-48rj-7qqh, ghsa-5m62-pw8w-7w9f, ghsa-gx5v-xp9w-j4cg, ghsa-fv25-8xcx-gqjc...

PT-2026-85894

Package thingsboard version 4.3.1.3-r1 fixes 82 vulnerabilities: ghsa-r29c-68gh-xp6x, ghsa-h6fc-48rj-7qqh, ghsa-5m62-pw8w-7w9f, ghsa-gx5v-xp9w-j4cg, ghsa-fv25-8xcx-gqjc...

CLEANSTART-2026-KB85137 Security fixes in thingsboard 4.3.0.1-r1

Package thingsboard version 4.3.0.1-r1 fixes 2 vulnerabilities: CVE-2026-4926, CVE-2026-4923...

CLEANSTART-2026-NU98727 Security fixes in thingsboard-tb-web-ui 4.3.1.1-r1

Package thingsboard-tb-web-ui version 4.3.1.1-r1 fixes 10 vulnerabilities: CVE-2026-8723, CVE-2026-53655, CVE-2026-47759, CVE-2026-47761, CVE-2026-47762...