FFalkorDB

Products

Exploited and recent CVEs

• CVE-2026-107911 High 7.5 Type confusion in FalkorDB GRAPH.QUERY via the --bolt argument 0.4%
• CVE-2026-107910 High 8.1 Authentication bypass in FalkorDB Bolt endpoint via fail-open AUTH probe error handling 0.5%
• CVE-2026-107909 Critical 9.1 Pre-authentication heap out-of-bounds write in FalkorDB Bolt WebSocket frame handling via unbounded payload length 0.4%
• CVE-2026-107908 Critical 9.8 Pre-authentication heap out-of-bounds write in FalkorDB Bolt BoltReadHandler via RESET message 0.6%
• CVE-2026-7826 Critical 9.1 Heap out-of-bounds read in FalkorDB BufferSerializerIOv2_ReadBuffer via crafted RDB 0.4%
• CVE-2026-7827 High 8.1 Stack-based buffer overflow in FalkorDB _RdbLoadEntity via unbounded property count in crafted RDB 0.6%
• CVE-2026-5759 Critical 9.8 Double free and use-after-free in FalkorDB RdbLoadDeletedNodes allows remote code execution via crafted RDB 0.6%
• CVE-2026-10130 High 8.2 QueryWeaver Authentication Bypass via Email Signup Token Issuance for Existing Accounts 0.6%
• CVE-2026-6057 Critical 9.8 Unauthenticated Path Traversal in FalkorDB Browser Leads to Remote Code Execution 0.9%