com.arcadedb
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| arcadedb-engine | 2 | – | Sep 15, 2026 |
| arcadedb-server | 1 | – | Sep 15, 2026 |
Exploited and recent CVEs
- CVE-2026-65831 ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file read 0.6%
- CVE-2026-54077 ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users 0.4%
- CVE-2026-54076 ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221) 0.5%