CVE-2026-44221

ArcadeDB prior to version 2.6.4 (also referenced as 26.4.2 in some advisories) contains a cross-database authorization bypass. Two defects enable authenticated principals to bypass both record-level and database-level controls: (1) ServerSecurityUser.getDatabaseUser() returns a DB user with an un...

NetCharts Server Code Execution

The vulnerability of the projectContents.jsp page on the NetCharts Server visualization platform is related to deficiencies in access control for files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by renaming and executing the file...