AArcadeData

Products

Exploited and recent CVEs

• CVE-2026-119577 Medium 6.8 ArcadeDB before 26.10.2 Improper Session Revocation in Wire-Protocol Connections 0.3%
• CVE-2026-119576 Medium 4.3 ArcadeDB from 21.12.1 before 26.10.2 GraphQL Schema Replacement via Read-Only Query Endpoint 0.2%
• CVE-2026-119575 Medium 6.5 ArcadeDB 26.8.1 before 26.10.2 SSRF via ALTER DATABASE LOAD CSV Block List 0.3%
• CVE-2026-114059 High 7.5 ArcadeDB before 26.10.1 RCE via Gremlin Groovy Engine Missing Authorization 0.6%
• CVE-2026-114058 Medium 4.3 ArcadeDB from 26.2.1 before 26.10.1 Missing Authorization via Bolt Protocol 0.3%
• CVE-2026-114057 Medium 4.3 ArcadeDB 26.2.1 before 26.10.1 Bolt SHOW DATABASES Information Disclosure 0.3%
• CVE-2026-114056 Medium 4.3 ArcadeDB from 26.8.1 before 26.10.1 Authorization Bypass via ALTER TYPE WITH 0.3%
• CVE-2026-93598 High 7.1 ArcadeDB before 26.9.1 Classpath Credential Disclosure via ResourceBundle 0.6%
• CVE-2026-93597 High 7.7 ArcadeDB before 26.9.1 SSRF via IPv6 transition addresses 0.4%
• CVE-2026-93596 Medium 4.3 ArcadeDB before 26.9.1 Authorization Bypass via Batch Edge Connect 0.3%
• CVE-2026-93595 Medium 6.5 ArcadeDB before 26.9.1 ACL Bypass via query_database Tool 0.4%
• CVE-2026-93594 High 8.1 ArcadeDB before 26.9.1 ACL Bypass via Index and TimeSeries 0.4%
• CVE-2026-93593 High 8.1 ArcadeDB before 26.9.1 TimeSeries ACL Bypass via Type Permission 0.4%
• CVE-2026-65831 High 7.7 ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file read 0.6%
• CVE-2026-54077 High 7.1 ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users 0.4%
• CVE-2026-54076 High 8.1 ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221) 0.5%
• CVE-2026-76225 High 7.7 ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSV 0.4%
• CVE-2026-76224 High 8.8 ArcadeDB before 26.8.1 Remote Code Execution via Groovy Fallback 0.9%
• CVE-2026-76223 High 7.1 ArcadeDB before 26.8.1 Permission Bypass via DEFINE FUNCTION 0.4%
• CVE-2026-75855 High 8.7 ArcadeDB before 26.8.1 Path Traversal via create/drop database 0.5%
• CVE-2026-75854 Critical 9.8 ArcadeDB Redis Wire-Protocol Plugin Missing Authentication 0.9%
• CVE-2026-75853 High 8.8 ArcadeDB Gremlin Wire Protocol Authorization Bypass Cross-Database 0.6%
• CVE-2026-75852 Critical 9.8 ArcadeDB MongoDB wire protocol authentication bypass cross-database 0.7%
• CVE-2026-75851 Critical 9.9 ArcadeDB before 26.8.1 Authentication Bypass via Async Command 0.4%
• CVE-2026-75850 Medium 4.2 ArcadeDB before 26.8.1 Per-Type ACL Bypass via Batch Handlers 0.2%
• CVE-2026-75846 High 7.1 ArcadeDB before 26.8.1 Unauthorized Function Deletion via DELETE FUNCTION 0.4%
• CVE-2026-75845 Medium 6.3 ArcadeDB 26.4.2 before 26.8.1 Authorization Bypass via set_server_setting 0.3%
• CVE-2026-75844 High 7.1 ArcadeDB before 26.8.1 SSRF via IMPORT DATABASE validator bypass 0.3%
• CVE-2026-75843 Critical 9.9 ArcadeDB before 26.8.1 Privilege Escalation via gRPC Transaction 0.4%
• CVE-2026-75842 High 7.7 ArcadeDB before 26.8.1 Arbitrary File Read via LOAD CSV 0.5%