thingsboard

Plataforma IoT todo en uno para la recopilación, el procesamiento y la visualización de datos, y la gestión de dispositivos. 💡 Comenzar • 🌐 Sitio web • 📚 Documentación • 📔 Blog • 🔗 LinkedIn 🚀 Opciones de instalación Instala ThingsBoard on-premises o utiliza ThingsBoard Cloud. 💡 Primeros pasos con...

ThingsBoard-IoT-Platform-CVE-2024-55466

Escalada de privilegios en ThingsBoard mediante XSS almacenado Mientras experimentaba con tecnología IoT, encontré una vulnerabilidad en la aplicación Thingsboard que permitía vías para la escalada de privilegios. Thingsboard es una aplicación de código abierto que permite la gestión de...

thingsboard-ssrf-cve-2025-34282

CVE-2025-34282 — ThingsBoard SSRF mediante carga de imágenes SVG Resumen Vulnerabilidad de falsificación de solicitudes del servidor SSRF en ThingsBoard IoT Platform en versiones anteriores a 4.2.1. Un atacante con acceso de Tenant Admin puede subir un archivo SVG manipulado que contiene una...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: opensearch, celeborn, solr-fips, elasticsearch, opensearch-fips, apache-pulsar-fips, mongodb-search-fips, cruise-control, airbyte-platform-fips, keycloak-config-cli, localstack, traccar-fips, jenkins-plugin-manager, strimzi-kafka-oauth-fips, gradle, cassandra-reaper,...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: opensearch, celeborn, solr-fips, elasticsearch, opensearch-fips, apache-pulsar-fips, mongodb-search-fips, cruise-control, airbyte-platform-fips, keycloak-config-cli, localstack, traccar-fips, jenkins-plugin-manager, strimzi-kafka-oauth-fips, gradle, cassandra-reaper,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: opensearch, celeborn, solr-fips, elasticsearch, opensearch-fips, apache-pulsar-fips, mongodb-search-fips, cruise-control, airbyte-platform-fips, keycloak-config-cli, localstack, traccar-fips, jenkins-plugin-manager, strimzi-kafka-oauth-fips, gradle, cassandra-reaper,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: opensearch, celeborn, solr-fips, elasticsearch, opensearch-fips, apache-pulsar-fips, mongodb-search-fips, cruise-control, airbyte-platform-fips, keycloak-config-cli, localstack, traccar-fips, jenkins-plugin-manager, strimzi-kafka-oauth-fips, gradle, cassandra-reaper,...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: neo4j, wildfly, celeborn, cassandra-reaper, spdx-tools-java, strimzi-kafka-operator, jenkins-plugin-manager, tez, keycloak-config-cli, cass-config-builder, thingsboard, dependency-track, wavefront-proxy, management-api-for-apache-cassandra-5.0, akhq, logstash,...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: neo4j, wildfly, celeborn, cassandra-reaper, spdx-tools-java, strimzi-kafka-operator, jenkins-plugin-manager, tez, keycloak-config-cli, cass-config-builder, thingsboard, dependency-track, wavefront-proxy, management-api-for-apache-cassandra-5.0, akhq, logstash,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: neo4j, wildfly, celeborn, cassandra-reaper, spdx-tools-java, strimzi-kafka-operator, jenkins-plugin-manager, tez, keycloak-config-cli, cass-config-builder, thingsboard, dependency-track, wavefront-proxy, management-api-for-apache-cassandra-5.0, akhq, logstash,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: neo4j, wildfly, celeborn, cassandra-reaper, spdx-tools-java, strimzi-kafka-operator, jenkins-plugin-manager, tez, keycloak-config-cli, cass-config-builder, thingsboard, dependency-track, wavefront-proxy, management-api-for-apache-cassandra-5.0, akhq, logstash,...

CLEANSTART-2026-NN34341 Security fix for CVE-2026-26960 applied in: mongosh 2.5.10-r5, mongosh 2.6.0-r4, npm 11.10.0-r1, renovate 43.4.3-r1, renovate 43.4.4-r0, thingsboard-tb-web-ui 4.3.1-r0

CVE-2026-26960 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WV30852 Security fix for CVE-2026-29786 applied in: mongosh 2.5.10-r5, mongosh 2.6.0-r4, renovate 43.4.3-r1, renovate 43.4.4-r0, sqlpad 7.5.7-r1, thingsboard-tb-web-ui 4.3.1-r0

CVE-2026-29786 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MW19809 Security fix for CVE-2026-22735 applied in: activemq 5.19.8-r3, activemq 6.1.8-r1, activemq 6.2.3-r0, apache-nifi 2.6.0-r3, kafka-ui 1.2.0-r4, kafka-ui 1.3.0-r2, kafka-ui 1.4.2-r5, thingsboard 4.3.0.1-r2

CVE-2026-22735 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DU72906 Security fix for CVE-2026-22737 applied in: activemq 5.19.8-r3, activemq 6.1.8-r1, activemq 6.2.3-r0, kafka-ui 1.2.0-r4, kafka-ui 1.3.0-r2, kafka-ui 1.4.2-r5, thingsboard 4.3.0.1-r2

CVE-2026-22737 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AN94003 Security fix for CVE-2026-4923 applied in: mongosh 2.5.10-r4, mongosh 2.6.0-r3, mongosh 2.7.0-r1, mongosh 2.8.2-r0, opensearch-dashboards-fips 2.19.5-r0, thingsboard 4.3.0.1-r1

CVE-2026-4923 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SQ74175 Security fix for CVE-2026-4926 applied in: mongosh 2.5.10-r4, mongosh 2.6.0-r3, mongosh 2.7.0-r1, mongosh 2.8.2-r0, opensearch-dashboards-fips 2.19.5-r0, thingsboard 4.3.0.1-r1

CVE-2026-4926 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RR66440 Security fix for CVE-2023-3635 applied in: s3proxy 3.3.0-r1, stargate 2.0.44-r4, thingsboard 4.3.0.1-r2

CVE-2023-3635 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KB50222 Security fix for CVE-2025-41254 applied in: thingsboard 4.3.0.1-r2

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-PZ00337 Security fix for CVE-2026-24733 applied in: thingsboard 4.3.0.1-r2, thingsboard 4.3.1-r0

CVE-2026-24733 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...