ArcadeData arcadedb vulnerabilities

Newest CVEs

• CVE-2026-119577

  ArcadeDB before 26.10.2 Improper Session Revocation in Wire-Protocol Connections

  ArcadeData · arcadedb

  High7.6
• CVE-2026-119576

  ArcadeDB from 21.12.1 before 26.10.2 GraphQL Schema Replacement via Read-Only Query Endpoint

  ArcadeData · arcadedb

  Medium5.3
• CVE-2026-119575

  ArcadeDB 26.8.1 before 26.10.2 SSRF via ALTER DATABASE LOAD CSV Block List

  ArcadeData · arcadedb

  High7.1
• CVE-2026-114059

  ArcadeDB before 26.10.1 RCE via Gremlin Groovy Engine Missing Authorization

  ArcadeData · arcadedb

  High7.7
• CVE-2026-114058

  ArcadeDB from 26.2.1 before 26.10.1 Missing Authorization via Bolt Protocol

  ArcadeData · arcadedb

  Medium5.3
• CVE-2026-114057

  ArcadeDB 26.2.1 before 26.10.1 Bolt SHOW DATABASES Information Disclosure

  ArcadeData · arcadedb

  Medium5.3
• CVE-2026-114056

  ArcadeDB from 26.8.1 before 26.10.1 Authorization Bypass via ALTER TYPE WITH

  ArcadeData · arcadedb

  Medium5.3
• CVE-2026-93598

  ArcadeDB before 26.9.1 Classpath Credential Disclosure via ResourceBundle

  ArcadeData · arcadedb

  High7.1
• CVE-2026-93597

  ArcadeDB before 26.9.1 SSRF via IPv6 transition addresses

  ArcadeData · arcadedb

  Medium5.3
• CVE-2026-93596

  ArcadeDB before 26.9.1 Authorization Bypass via Batch Edge Connect

  ArcadeData · arcadedb

  Medium5.3