Advisories · Technology

kurrent-io KurrentDB.

Every CVE that names kurrent-io KurrentDB among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-81190 CVE record

CVSS 6.9 Medium

KurrentDB: Privileged access to read $all enables arbitrary file read and GET-only SSRF
- kurrent-io KurrentDB
- Path traversal
- Server-side request forgery (SSRF)
Not analysed yet 5 Nov 2026