CVE-2026-93594: Incorrect Authorization

ArcadeDB Maven artifact com.arcadedb:arcadedb-engine through 26.8.1 enforces its per-type/per-record access-control rules only in LocalBucket, keyed on file id. Query-execution paths that reach record data through LSM index files or the TimeSeries engine never invoke that permission check, so an...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.7.2), com.arcadedb:arcadedb-console (>=21.9.1-beta, <=26.7.2) +20 more potentially affected by CVE-2026-67356 via com.arcadedb:arcadedb-engine (>=21.9.1-beta, <=26.7.2)

com.arcadedb:arcadedb-engine MAVEN version =21.9.1-beta, =26.2.1, =21.9.1-beta, =21.9.1-beta, =21.12.1, =21.9.1-beta, =25.9.1, =25.9.1, =25.9.1, =26.4.2, =21.9.1-beta, =25.1.1, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =26.7.2 and more Source cves: CVE-2026-67356 Source advisory:...

com.arcadedb:arcadedb-console (23.6.1), com.arcadedb:arcadedb-coverage (23.6.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (23.6.1)

com.arcadedb:arcadedb-engine MAVEN version 23.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.6.1 - com.arcadedb:arcadedb-coverage 23.6.1 -...

com.arcadedb:arcadedb-console (24.5.1), com.arcadedb:arcadedb-coverage (24.5.1) +7 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (24.5.1)

com.arcadedb:arcadedb-engine MAVEN version 24.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.5.1 - com.arcadedb:arcadedb-coverage 24.5.1 -...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.7.1), com.arcadedb:arcadedb-console (>=26.1.1, <=26.7.1) +18 more potentially affected by unknown CVE via com.arcadedb:arcadedb-engine (>=26.1.1, <=26.7.1)

com.arcadedb:arcadedb-engine MAVEN version =26.1.1, =26.2.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.4.2, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.7.1 and more Source cves: unknown CVE Source advisory: SNYK:JAVA-COMARCADEDB-18021395...

com.arcadedb:arcadedb-console (23.7.1), com.arcadedb:arcadedb-coverage (23.7.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (23.7.1)

com.arcadedb:arcadedb-engine MAVEN version 23.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.7.1 - com.arcadedb:arcadedb-coverage 23.7.1 -...

com.arcadedb:arcadedb-console (25.1.1), com.arcadedb:arcadedb-coverage (25.1.1) +10 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (25.1.1)

com.arcadedb:arcadedb-engine MAVEN version 25.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.1.1 - com.arcadedb:arcadedb-coverage 25.1.1 -...

com.arcadedb:arcadedb-console (21.10.1), com.arcadedb:arcadedb-coverage (21.10.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (21.10.1)

com.arcadedb:arcadedb-engine MAVEN version 21.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 21.10.1 - com.arcadedb:arcadedb-coverage 21.10.1 -...

com.arcadedb:arcadedb-console (21.11.1), com.arcadedb:arcadedb-coverage (21.11.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (21.11.1)

com.arcadedb:arcadedb-engine MAVEN version 21.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 21.11.1 - com.arcadedb:arcadedb-coverage 21.11.1 -...

com.arcadedb:arcadedb-console (25.12.1), com.arcadedb:arcadedb-graphql (25.12.1) +13 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (25.12.1)

com.arcadedb:arcadedb-engine MAVEN version 25.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.12.1 - com.arcadedb:arcadedb-graphql 25.12.1 -...

com.arcadedb:arcadedb-console (21.10.2), com.arcadedb:arcadedb-coverage (21.10.2) +9 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (21.10.2)

com.arcadedb:arcadedb-engine MAVEN version 21.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 21.10.2 - com.arcadedb:arcadedb-coverage 21.10.2 -...

com.arcadedb:arcadedb-console (22.1.2), com.arcadedb:arcadedb-coverage (22.1.2) +7 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (22.1.2)

com.arcadedb:arcadedb-engine MAVEN version 22.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.1.2 - com.arcadedb:arcadedb-coverage 22.1.2 -...

com.arcadedb:arcadedb-console (22.1.3), com.arcadedb:arcadedb-graphql (22.1.3) +7 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (22.1.3)

com.arcadedb:arcadedb-engine MAVEN version 22.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.1.3 - com.arcadedb:arcadedb-graphql 22.1.3 -...

com.arcadedb:arcadedb-console (22.8.1), com.arcadedb:arcadedb-coverage (22.8.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (22.8.1)

com.arcadedb:arcadedb-engine MAVEN version 22.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.8.1 - com.arcadedb:arcadedb-coverage 22.8.1 -...

com.arcadedb:arcadedb-console (23.1.1), com.arcadedb:arcadedb-coverage (23.1.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (23.1.1)

com.arcadedb:arcadedb-engine MAVEN version 23.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.1.1 - com.arcadedb:arcadedb-coverage 23.1.1 -...

com.arcadedb:arcadedb-console (23.2.1), com.arcadedb:arcadedb-coverage (23.2.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (23.2.1)

com.arcadedb:arcadedb-engine MAVEN version 23.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.2.1 - com.arcadedb:arcadedb-coverage 23.2.1 -...

com.arcadedb:arcadedb-console (23.4.1), com.arcadedb:arcadedb-coverage (23.4.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (23.4.1)

com.arcadedb:arcadedb-engine MAVEN version 23.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.4.1 - com.arcadedb:arcadedb-coverage 23.4.1 -...

com.arcadedb:arcadedb-console (23.10.1), com.arcadedb:arcadedb-coverage (23.10.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (23.10.1)

com.arcadedb:arcadedb-engine MAVEN version 23.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.10.1 - com.arcadedb:arcadedb-coverage 23.10.1 -...

com.arcadedb:arcadedb-console (23.11.1), com.arcadedb:arcadedb-coverage (23.11.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (23.11.1)

com.arcadedb:arcadedb-engine MAVEN version 23.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.11.1 - com.arcadedb:arcadedb-coverage 23.11.1 -...

com.arcadedb:arcadedb-console (23.12.1), com.arcadedb:arcadedb-coverage (23.12.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (23.12.1)

com.arcadedb:arcadedb-engine MAVEN version 23.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.12.1 - com.arcadedb:arcadedb-coverage 23.12.1 -...