agentprime: apache-software-foundation-apache-iotdbEvery new CVE for apache-software-foundation-apache-iotdb.https://agentprime.io/CVE-2026-59229: Apache IoTDB: Legacy Pipe Privilege Escalationhttps://agentprime.io/advisories/CVE-2026-59229/https://agentprime.io/advisories/CVE-2026-59229/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:11:46 GMTCVECVE-2026-59562: Apache IoTDB: Remote code execution and Unauthenticated path traversal in legacy pipe sendFile RPChttps://agentprime.io/advisories/CVE-2026-59562/https://agentprime.io/advisories/CVE-2026-59562/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:10:26 GMTCVEcriticalCVE-2026-58663: Apache IoTDB: Auth Bypass in pipeTransfer() interfacehttps://agentprime.io/advisories/CVE-2026-58663/https://agentprime.io/advisories/CVE-2026-58663/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 11:03:23 GMTCVEcriticalCVE-2026-44630: Apache IoTDB: RPC service denial of service via unchecked Thrift string lengthhttps://agentprime.io/advisories/CVE-2026-44630/https://agentprime.io/advisories/CVE-2026-44630/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 09:25:11 GMTCVECVE-2026-40452: Apache IoTDB: Authorization bypass in /rest/v2/fastLastQuery exposes last-value data to unauthorized authenticated usershttps://agentprime.io/advisories/CVE-2026-40452/https://agentprime.io/advisories/CVE-2026-40452/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 07:16:05 GMTCVECVE-2026-40009: Apache IoTDB: Authenticated users can escalate to full tree-path access by renaming themselves to __internal_auditorhttps://agentprime.io/advisories/CVE-2026-40009/https://agentprime.io/advisories/CVE-2026-40009/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 07:15:07 GMTCVECVE-2026-40008: Apache IoTDB: Arbitrary Class Instantiation via Pipe Transfer RPChttps://agentprime.io/advisories/CVE-2026-40008/https://agentprime.io/advisories/CVE-2026-40008/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 07:13:27 GMTCVEcriticalCVE-2026-40007: Apache IoTDB: Unauthenticated unbounded recursion in IoTDB AirGap receiver's E-language prefix parser causes per-connection StackOverflowErrorhttps://agentprime.io/advisories/CVE-2026-40007/https://agentprime.io/advisories/CVE-2026-40007/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 07:12:29 GMTCVECVE-2026-40006: Apache IoTDB: Unauthenticated heap-exhaustion DoS via unbounded allocation in IoTDB AirGap pipe receiverhttps://agentprime.io/advisories/CVE-2026-40006/https://agentprime.io/advisories/CVE-2026-40006/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 07:10:54 GMTCVECVE-2026-40005: Apache IoTDB: Path Traversal in Pipe File Transfer Receiverhttps://agentprime.io/advisories/CVE-2026-40005/https://agentprime.io/advisories/CVE-2026-40005/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 07:09:49 GMTCVEcriticalCVE-2026-28564: Apache IoTDB: REST Basic Authentication Accepts Stale Cached Credentialshttps://agentprime.io/advisories/CVE-2026-28564/https://agentprime.io/advisories/CVE-2026-28564/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 07:08:12 GMTCVEcritical