agentprime: arcadedata-arcadedb

agentprime: arcadedata-arcadedbEvery new CVE for arcadedata-arcadedb.https://agentprime.io/CVE-2026-119577: ArcadeDB before 26.10.2 Improper Session Revocation in Wire-Protocol Connectionshttps://agentprime.io/advisories/CVE-2026-119577/https://agentprime.io/advisories/CVE-2026-119577/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 13:18:15 GMTCVECVE-2026-119576: ArcadeDB from 21.12.1 before 26.10.2 GraphQL Schema Replacement via Read-Only Query Endpointhttps://agentprime.io/advisories/CVE-2026-119576/https://agentprime.io/advisories/CVE-2026-119576/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 13:18:14 GMTCVECVE-2026-119575: ArcadeDB 26.8.1 before 26.10.2 SSRF via ALTER DATABASE LOAD CSV Block Listhttps://agentprime.io/advisories/CVE-2026-119575/https://agentprime.io/advisories/CVE-2026-119575/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 13:18:13 GMTCVECVE-2026-114059: ArcadeDB before 26.10.1 RCE via Gremlin Groovy Engine Missing Authorizationhttps://agentprime.io/advisories/CVE-2026-114059/https://agentprime.io/advisories/CVE-2026-114059/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:34 GMTCVECVE-2026-114058: ArcadeDB from 26.2.1 before 26.10.1 Missing Authorization via Bolt Protocolhttps://agentprime.io/advisories/CVE-2026-114058/https://agentprime.io/advisories/CVE-2026-114058/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:33 GMTCVECVE-2026-114057: ArcadeDB 26.2.1 before 26.10.1 Bolt SHOW DATABASES Information Disclosurehttps://agentprime.io/advisories/CVE-2026-114057/https://agentprime.io/advisories/CVE-2026-114057/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:32 GMTCVECVE-2026-114056: ArcadeDB from 26.8.1 before 26.10.1 Authorization Bypass via ALTER TYPE WITHhttps://agentprime.io/advisories/CVE-2026-114056/https://agentprime.io/advisories/CVE-2026-114056/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 00:36:31 GMTCVECVE-2026-93598: ArcadeDB before 26.9.1 Classpath Credential Disclosure via ResourceBundlehttps://agentprime.io/advisories/CVE-2026-93598/https://agentprime.io/advisories/CVE-2026-93598/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 13:20:09 GMTCVECVE-2026-93597: ArcadeDB before 26.9.1 SSRF via IPv6 transition addresseshttps://agentprime.io/advisories/CVE-2026-93597/https://agentprime.io/advisories/CVE-2026-93597/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 13:20:08 GMTCVECVE-2026-93596: ArcadeDB before 26.9.1 Authorization Bypass via Batch Edge Connecthttps://agentprime.io/advisories/CVE-2026-93596/https://agentprime.io/advisories/CVE-2026-93596/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 13:20:08 GMTCVECVE-2026-93595: ArcadeDB before 26.9.1 ACL Bypass via query_database Toolhttps://agentprime.io/advisories/CVE-2026-93595/https://agentprime.io/advisories/CVE-2026-93595/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 13:20:07 GMTCVECVE-2026-93594: ArcadeDB before 26.9.1 ACL Bypass via Index and TimeSerieshttps://agentprime.io/advisories/CVE-2026-93594/https://agentprime.io/advisories/CVE-2026-93594/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 13:20:06 GMTCVECVE-2026-93593: ArcadeDB before 26.9.1 TimeSeries ACL Bypass via Type Permissionhttps://agentprime.io/advisories/CVE-2026-93593/https://agentprime.io/advisories/CVE-2026-93593/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 13:20:06 GMTCVECVE-2026-76225: ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSVhttps://agentprime.io/advisories/CVE-2026-76225/https://agentprime.io/advisories/CVE-2026-76225/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 14:02:07 GMTCVECVE-2026-76224: ArcadeDB before 26.8.1 Remote Code Execution via Groovy Fallbackhttps://agentprime.io/advisories/CVE-2026-76224/https://agentprime.io/advisories/CVE-2026-76224/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 14:02:07 GMTCVECVE-2026-76223: ArcadeDB before 26.8.1 Permission Bypass via DEFINE FUNCTIONhttps://agentprime.io/advisories/CVE-2026-76223/https://agentprime.io/advisories/CVE-2026-76223/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 14:02:06 GMTCVECVE-2026-75855: ArcadeDB before 26.8.1 Path Traversal via create/drop databasehttps://agentprime.io/advisories/CVE-2026-75855/https://agentprime.io/advisories/CVE-2026-75855/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 11:19:57 GMTCVECVE-2026-75854: ArcadeDB Redis Wire-Protocol Plugin Missing Authenticationhttps://agentprime.io/advisories/CVE-2026-75854/https://agentprime.io/advisories/CVE-2026-75854/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 11:19:57 GMTCVEcriticalCVE-2026-75853: ArcadeDB Gremlin Wire Protocol Authorization Bypass Cross-Databasehttps://agentprime.io/advisories/CVE-2026-75853/https://agentprime.io/advisories/CVE-2026-75853/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 11:19:56 GMTCVECVE-2026-75852: ArcadeDB MongoDB wire protocol authentication bypass cross-databasehttps://agentprime.io/advisories/CVE-2026-75852/https://agentprime.io/advisories/CVE-2026-75852/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 11:19:55 GMTCVEcriticalCVE-2026-75851: ArcadeDB before 26.8.1 Authentication Bypass via Async Commandhttps://agentprime.io/advisories/CVE-2026-75851/https://agentprime.io/advisories/CVE-2026-75851/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 11:19:55 GMTCVEcriticalCVE-2026-75850: ArcadeDB before 26.8.1 Per-Type ACL Bypass via Batch Handlershttps://agentprime.io/advisories/CVE-2026-75850/https://agentprime.io/advisories/CVE-2026-75850/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 11:19:54 GMTCVECVE-2026-75846: ArcadeDB before 26.8.1 Unauthorized Function Deletion via DELETE FUNCTIONhttps://agentprime.io/advisories/CVE-2026-75846/https://agentprime.io/advisories/CVE-2026-75846/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 11:19:53 GMTCVECVE-2026-75845: ArcadeDB 26.4.2 before 26.8.1 Authorization Bypass via set_server_settinghttps://agentprime.io/advisories/CVE-2026-75845/https://agentprime.io/advisories/CVE-2026-75845/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 11:19:52 GMTCVECVE-2026-75844: ArcadeDB before 26.8.1 SSRF via IMPORT DATABASE validator bypasshttps://agentprime.io/advisories/CVE-2026-75844/https://agentprime.io/advisories/CVE-2026-75844/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 11:19:51 GMTCVECVE-2026-75843: ArcadeDB before 26.8.1 Privilege Escalation via gRPC Transactionhttps://agentprime.io/advisories/CVE-2026-75843/https://agentprime.io/advisories/CVE-2026-75843/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 11:19:51 GMTCVEcriticalCVE-2026-75842: ArcadeDB before 26.8.1 Arbitrary File Read via LOAD CSVhttps://agentprime.io/advisories/CVE-2026-75842/https://agentprime.io/advisories/CVE-2026-75842/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 11:19:50 GMTCVECVE-2026-75841: ArcadeDB before 26.8.1 Denial of Service via range()https://agentprime.io/advisories/CVE-2026-75841/https://agentprime.io/advisories/CVE-2026-75841/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 11:19:49 GMTCVECVE-2026-75840: ArcadeDB before 26.8.1 Arbitrary File Read via Unescaped Regexhttps://agentprime.io/advisories/CVE-2026-75840/https://agentprime.io/advisories/CVE-2026-75840/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 11:19:49 GMTCVECVE-2026-75839: ArcadeDB before 26.8.1 Information Disclosure via Cluster Endpointshttps://agentprime.io/advisories/CVE-2026-75839/https://agentprime.io/advisories/CVE-2026-75839/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 11:19:48 GMTCVECVE-2026-68578: ArcadeDB before 26.7.3 Authentication Bypass via MCP Transporthttps://agentprime.io/advisories/CVE-2026-68578/https://agentprime.io/advisories/CVE-2026-68578/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 02 Aug 2026 12:15:25 GMTCVECVE-2026-67357: ArcadeDB before 26.7.3 Information Disclosure via get_server_settingshttps://agentprime.io/advisories/CVE-2026-67357/https://agentprime.io/advisories/CVE-2026-67357/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 02 Aug 2026 12:15:25 GMTCVECVE-2026-67356: ArcadeDB before 26.7.3 Privilege Escalation via JavaScript Triggerhttps://agentprime.io/advisories/CVE-2026-67356/https://agentprime.io/advisories/CVE-2026-67356/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 02 Aug 2026 12:15:24 GMTCVECVE-2026-67344: ArcadeDB before 26.7.2 Authentication Bypass via ALTER TYPEhttps://agentprime.io/advisories/CVE-2026-67344/https://agentprime.io/advisories/CVE-2026-67344/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 01 Aug 2026 12:22:18 GMTCVECVE-2026-67343: ArcadeDB before 26.7.2 Cluster Token Disclosure via GET /api/v1/serverhttps://agentprime.io/advisories/CVE-2026-67343/https://agentprime.io/advisories/CVE-2026-67343/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 01 Aug 2026 12:22:17 GMTCVE