Advisories · Technology
ArcadeData arcadedb.
Every CVE that names ArcadeData arcadedb among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.6 High
ArcadeDB before 26.10.2 Improper Session Revocation in Wire-Protocol Connections
- ArcadeData arcadedb
- Authentication bypass
- CVSS 5.3 Medium
ArcadeDB from 21.12.1 before 26.10.2 GraphQL Schema Replacement via Read-Only Query Endpoint
- ArcadeData arcadedb
- Broken access control
- CVSS 7.1 High
ArcadeDB 26.8.1 before 26.10.2 SSRF via ALTER DATABASE LOAD CSV Block List
- ArcadeData arcadedb
- Server-side request forgery (SSRF)
- CVSS 7.7 High
ArcadeDB before 26.10.1 RCE via Gremlin Groovy Engine Missing Authorization
- ArcadeData arcadedb
- Broken access control
- CVSS 5.3 Medium
ArcadeDB from 26.2.1 before 26.10.1 Missing Authorization via Bolt Protocol
- ArcadeData arcadedb
- Broken access control
- CVSS 5.3 Medium
ArcadeDB 26.2.1 before 26.10.1 Bolt SHOW DATABASES Information Disclosure
- ArcadeData arcadedb
- Broken access control
- CVSS 5.3 Medium
ArcadeDB from 26.8.1 before 26.10.1 Authorization Bypass via ALTER TYPE WITH
- ArcadeData arcadedb
- Broken access control
- CVSS 7.1 High
ArcadeDB before 26.9.1 Classpath Credential Disclosure via ResourceBundle
- ArcadeData arcadedb
- CWE-184
- CVSS 5.3 Medium
ArcadeDB before 26.9.1 SSRF via IPv6 transition addresses
- ArcadeData arcadedb
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
ArcadeDB before 26.9.1 Authorization Bypass via Batch Edge Connect
- ArcadeData arcadedb
- Broken access control
- CVSS 7.1 High
ArcadeDB before 26.9.1 ACL Bypass via query_database Tool
- ArcadeData arcadedb
- Broken access control
- CVSS 7.1 High
ArcadeDB before 26.9.1 ACL Bypass via Index and TimeSeries
- ArcadeData arcadedb
- Broken access control
- CVSS 8.6 High
ArcadeDB before 26.9.1 TimeSeries ACL Bypass via Type Permission
- ArcadeData arcadedb
- Broken access control
- CVSS 8.3 High
ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSV
- ArcadeData arcadedb
- Server-side request forgery (SSRF)
- CVSS 8.7 High
ArcadeDB before 26.8.1 Remote Code Execution via Groovy Fallback
- ArcadeData arcadedb
- Code injection
- CVSS 7.1 High
ArcadeDB before 26.8.1 Permission Bypass via DEFINE FUNCTION
- ArcadeData arcadedb
- Broken access control
- CVSS 8.4 High
ArcadeDB before 26.8.1 Path Traversal via create/drop database
- ArcadeData arcadedb
- Path traversal
- CVSS 9.3 CriticalCritical · CVSS 9+
ArcadeDB Redis Wire-Protocol Plugin Missing Authentication
- ArcadeData arcadedb
- Authentication bypass
- CVSS 8.7 High
ArcadeDB Gremlin Wire Protocol Authorization Bypass Cross-Database
- ArcadeData arcadedb
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
ArcadeDB MongoDB wire protocol authentication bypass cross-database
- ArcadeData arcadedb
- Authentication bypass
- CVSS 9.4 CriticalCritical · CVSS 9+
ArcadeDB before 26.8.1 Authentication Bypass via Async Command
- ArcadeData arcadedb
- Privilege escalation
- CVSS 2.3 Low
ArcadeDB before 26.8.1 Per-Type ACL Bypass via Batch Handlers
- ArcadeData arcadedb
- Broken access control
- CVSS 7.1 High
ArcadeDB before 26.8.1 Unauthorized Function Deletion via DELETE FUNCTION
- ArcadeData arcadedb
- Broken access control
- CVSS 5.3 Medium
ArcadeDB 26.4.2 before 26.8.1 Authorization Bypass via set_server_setting
- ArcadeData arcadedb
- Privilege escalation
- CVSS 7.1 High
ArcadeDB before 26.8.1 SSRF via IMPORT DATABASE validator bypass
- ArcadeData arcadedb
- Server-side request forgery (SSRF)
- CVSS 9.4 CriticalCritical · CVSS 9+
ArcadeDB before 26.8.1 Privilege Escalation via gRPC Transaction
- ArcadeData arcadedb
- Privilege escalation
- CVSS 8.3 High
ArcadeDB before 26.8.1 Arbitrary File Read via LOAD CSV
- ArcadeData arcadedb
- Path traversal
- CVSS 5.3 Medium
ArcadeDB before 26.8.1 Denial of Service via range()
- ArcadeData arcadedb
- Denial of service
- CVSS 8.7 High
ArcadeDB before 26.8.1 Arbitrary File Read via Unescaped Regex
- ArcadeData arcadedb
- CWE-1025
- CVSS 5.3 Medium
ArcadeDB before 26.8.1 Information Disclosure via Cluster Endpoints
- ArcadeData arcadedb
- Information disclosure
- CVSS 7.7 High
ArcadeDB before 26.7.3 Authentication Bypass via MCP Transport
- ArcadeData arcadedb
- Authentication bypass
- CVSS 7.7 High
ArcadeDB before 26.7.3 Information Disclosure via get_server_settings
- ArcadeData arcadedb
- Information disclosure
- CVSS 8.7 High
ArcadeDB before 26.7.3 Privilege Escalation via JavaScript Trigger
- ArcadeData arcadedb
- Privilege escalation
- CVSS 8.5 High
ArcadeDB before 26.7.2 Authentication Bypass via ALTER TYPE
- ArcadeData arcadedb
- Broken access control
- CVSS 8.7 High
ArcadeDB before 26.7.2 Cluster Token Disclosure via GET /api/v1/server
- ArcadeData arcadedb
- Information disclosure