thingsboard

Plateforme IoT tout-en-un pour la collecte, le traitement, la visualisation des données et la gestion des appareils. 💡 Premiers pas • 🌐 Site web • 📚 Documentation • 📔 Blog • 🔗 LinkedIn 🚀 Options d'installation Installez ThingsBoard sur site ou utilisez ThingsBoard Cloud. 💡 Premiers pas avec...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: solr, drain-cleaner, tez, neo4j, apache-pulsar-fips, camunda-zeebe, airbyte-platform-fips, flink-kubernetes-operator-fips, elasticsearch, knative-kafka-broker-fips, dependency-track, hadoop-client-modules, apicurio-registry-fips, gradle, drain-cleaner-fips,...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: solr, drain-cleaner, tez, neo4j, apache-pulsar-fips, camunda-zeebe, airbyte-platform-fips, flink-kubernetes-operator-fips, elasticsearch, knative-kafka-broker-fips, dependency-track, hadoop-client-modules, apicurio-registry-fips, gradle, drain-cleaner-fips,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: solr, drain-cleaner, tez, neo4j, apache-pulsar-fips, camunda-zeebe, airbyte-platform-fips, flink-kubernetes-operator-fips, elasticsearch, knative-kafka-broker-fips, dependency-track, hadoop-client-modules, apicurio-registry-fips, gradle, drain-cleaner-fips,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: solr, drain-cleaner, tez, neo4j, apache-pulsar-fips, camunda-zeebe, airbyte-platform-fips, flink-kubernetes-operator-fips, elasticsearch, knative-kafka-broker-fips, dependency-track, hadoop-client-modules, apicurio-registry-fips, gradle, drain-cleaner-fips,...

CVE-2026-89425 vulnerabilities

Vulnerabilities for packages: opensearch, akhq, celeborn, cassandra, management-api-for-apache-cassandra-5.0, strimzi-kafka-oauth, thingsboard, neo4j, cass-config-builder, wavefront-proxy, cassandra-reaper, tez, gradle, logstash, spdx-tools-java, strimzi-kafka-operator, wildfly,...

GHSA-7HHH-6RMP-J9QF vulnerabilities

Vulnerabilities for packages: opensearch, akhq, celeborn, cassandra, management-api-for-apache-cassandra-5.0, strimzi-kafka-oauth, thingsboard, neo4j, cass-config-builder, wavefront-proxy, cassandra-reaper, tez, gradle, logstash, spdx-tools-java, strimzi-kafka-operator, wildfly,...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: opensearch, akhq, celeborn, cassandra, management-api-for-apache-cassandra-5.0, strimzi-kafka-oauth, thingsboard, neo4j, cass-config-builder, wavefront-proxy, cassandra-reaper, tez, gradle, logstash, spdx-tools-java, strimzi-kafka-operator, wildfly,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: opensearch, akhq, celeborn, cassandra, management-api-for-apache-cassandra-5.0, strimzi-kafka-oauth, thingsboard, neo4j, cass-config-builder, wavefront-proxy, cassandra-reaper, tez, gradle, logstash, spdx-tools-java, strimzi-kafka-operator, wildfly,...

ThingsBoard-IoT-Platform-CVE-2024-55466

Escalade de privilèges dans ThingsBoard via XSS stocké En expérimentant avec la technologie IoT, j'ai découvert une vulnérabilité dans l'application Thingsboard qui ouvrait la voie à une escalade de privilèges. Thingsboard est une application open-source qui permet la gestion des appareils, la...

thingsboard-ssrf-cve-2025-34282

CVE-2025-34282 — SSRF через загрузку SVG-изображений в ThingsBoard Обзор Уязвимость подделки серверных запросов SSRF в IoT-платформе ThingsBoard версий до 4.2.1. Злоумышленник с правами администратора тенанта может загрузить сфабрикованный SVG-файл, содержащий ссылку на внутренний URL, через...

CLEANSTART-2026-NN34341 Security fix for CVE-2026-26960 applied in: mongosh 2.5.10-r5, mongosh 2.6.0-r4, npm 11.10.0-r1, renovate 43.4.3-r1, renovate 43.4.4-r0, thingsboard-tb-web-ui 4.3.1-r0

CVE-2026-26960 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WV30852 Security fix for CVE-2026-29786 applied in: mongosh 2.5.10-r5, mongosh 2.6.0-r4, renovate 43.4.3-r1, renovate 43.4.4-r0, sqlpad 7.5.7-r1, thingsboard-tb-web-ui 4.3.1-r0

CVE-2026-29786 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MW19809 Security fix for CVE-2026-22735 applied in: activemq 5.19.8-r3, activemq 6.1.8-r1, activemq 6.2.3-r0, apache-nifi 2.6.0-r3, kafka-ui 1.2.0-r4, kafka-ui 1.3.0-r2, kafka-ui 1.4.2-r5, thingsboard 4.3.0.1-r2

CVE-2026-22735 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DU72906 Security fix for CVE-2026-22737 applied in: activemq 5.19.8-r3, activemq 6.1.8-r1, activemq 6.2.3-r0, kafka-ui 1.2.0-r4, kafka-ui 1.3.0-r2, kafka-ui 1.4.2-r5, thingsboard 4.3.0.1-r2

CVE-2026-22737 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AN94003 Security fix for CVE-2026-4923 applied in: mongosh 2.5.10-r4, mongosh 2.6.0-r3, mongosh 2.7.0-r1, mongosh 2.8.2-r0, opensearch-dashboards-fips 2.19.5-r0, thingsboard 4.3.0.1-r1

CVE-2026-4923 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SQ74175 Security fix for CVE-2026-4926 applied in: mongosh 2.5.10-r4, mongosh 2.6.0-r3, mongosh 2.7.0-r1, mongosh 2.8.2-r0, opensearch-dashboards-fips 2.19.5-r0, thingsboard 4.3.0.1-r1

CVE-2026-4926 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RR66440 Security fix for CVE-2023-3635 applied in: s3proxy 3.3.0-r1, stargate 2.0.44-r4, thingsboard 4.3.0.1-r2

CVE-2023-3635 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KB50222 Security fix for CVE-2025-41254 applied in: thingsboard 4.3.0.1-r2

Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-PZ00337 Security fix for CVE-2026-24733 applied in: thingsboard 4.3.0.1-r2, thingsboard 4.3.1-r0

CVE-2026-24733 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...