378 matches found
CVE-2026-59562
Missing authentication for critical function vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...
CVE-2026-59229
The Legacy Pipe receiver protocol handshake / sendPipeData uses a hardcoded SUPERUSER root identity when executing data loading and deletion operations. A user with only SYSTEM-level privileges such as USEPIPE or MAINTAIN who does NOT have WRITEDATA or DELETEDATA permissions on target databases c...
CVE-2026-41114
Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. This issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...
CVE-2026-58663
An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...
CVE-2026-59229
Apache IoTDB versions 2.0.0 through 2.0.10 are vulnerable to a privilege escalation issue in the Legacy Pipe receiver protocol (specifically the handshake and sendPipeData functions). The root cause is the use of a hardcoded SUPER_USER (root) identity when executing data loading and deletion oper...
org.apache.iotdb:customize-mqtt-example (2.0.1-beta), org.apache.iotdb:integration-test (2.0.1-beta) +6 more potentially affected by CVE-2026-59229 via org.apache.iotdb:iotdb-server (>=2.0.1-beta, <=2.0.10)
org.apache.iotdb:iotdb-server MAVEN version =2.0.1-beta, =2.0.1-beta, =2.0.1-beta, =2.0.1-beta, =2.0.8, =2.0.1-beta, =2.0.10 Source cves: CVE-2026-59229 Source advisory: MEND:CVE-2026-59229...
EUVD-2026-107167
The Legacy Pipe receiver protocol handshake / sendPipeData uses a hardcoded SUPERUSER root identity when executing data loading and deletion operations. A user with only SYSTEM-level privileges such as USEPIPE or MAINTAIN who does NOT have WRITEDATA or DELETEDATA permissions on target databases c...
CVE-2026-59229 Apache IoTDB: Legacy Pipe Privilege Escalation
The Legacy Pipe receiver protocol handshake / sendPipeData uses a hardcoded SUPERUSER root identity when executing data loading and deletion operations. A user with only SYSTEM-level privileges such as USEPIPE or MAINTAIN who does NOT have WRITEDATA or DELETEDATA permissions on target databases c...
CVE-2026-59229
The Legacy Pipe receiver protocol handshake / sendPipeData uses a hardcoded SUPERUSER root identity when executing data loading and deletion operations. A user with only SYSTEM-level privileges such as USEPIPE or MAINTAIN who does NOT have WRITEDATA or DELETEDATA permissions on target databases c...
CVE-2026-59229 Apache IoTDB: Legacy Pipe Privilege Escalation
The Legacy Pipe receiver protocol handshake / sendPipeData uses a hardcoded SUPERUSER root identity when executing data loading and deletion operations. A user with only SYSTEM-level privileges such as USEPIPE or MAINTAIN who does NOT have WRITEDATA or DELETEDATA permissions on target databases c...
org.apache.iotdb:customize-mqtt-example (2.0.1-beta), org.apache.iotdb:integration-test (2.0.1-beta) +6 more potentially affected by CVE-2026-59562 via org.apache.iotdb:iotdb-server (>=2.0.1-beta, <=2.0.10)
org.apache.iotdb:iotdb-server MAVEN version =2.0.1-beta, =2.0.1-beta, =2.0.1-beta, =2.0.1-beta, =2.0.8, =2.0.1-beta, =2.0.10 Source cves: CVE-2026-59562 Source advisory: MEND:CVE-2026-59562...
CVE-2026-59562
Missing authentication for critical function vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...
CVE-2026-59562 Apache IoTDB: Remote code execution and Unauthenticated path traversal in legacy pipe sendFile RPC
Missing authentication for critical function vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...
CVE-2026-59562
The Apache IoTDB database is vulnerable to remote code execution and unauthenticated path traversal due to a missing authentication for critical function vulnerability in the legacy pipe sendFile RPC . This issue affects versions 2.0.0 through 2.0.10 . To remediate this vulnerability, users are r...
EUVD-2026-107166
Missing authentication for critical function vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...
CVE-2026-41114
Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. This issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...
CVE-2026-41114
The Apache IoTDB JDBC driver is vulnerable to an Uncontrolled Resource Consumption issue (CWE-400) involving large-scale memory exhaustion via the BigDecimal toPlainString method. This vulnerability specifically affects versions 1.3.3 before 2.0.11 . To remediate this issue, users are recommended...
EUVD-2026-107163
Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. This issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...
CVE-2026-41114 Apache IoTDB JDBC driver: Large-scale Memory Exhaustion via BigDecimal toPlainString in JDBC Driver
Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. This issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...
org.apache.iotdb:customize-mqtt-example (2.0.1-beta), org.apache.iotdb:integration-test (2.0.1-beta) +6 more potentially affected by CVE-2026-58663 via org.apache.iotdb:iotdb-server (>=2.0.1-beta, <=2.0.10)
org.apache.iotdb:iotdb-server MAVEN version =2.0.1-beta, =2.0.1-beta, =2.0.1-beta, =2.0.1-beta, =2.0.8, =2.0.1-beta, =2.0.10 Source cves: CVE-2026-58663 Source advisory: MEND:CVE-2026-58663...