Ddgraph-io

Products

Exploited and recent CVEs

• CVE-2026-102748 Critical 9.2 Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service 0.6%
• CVE-2026-63637 High 8.6 Dgraph: DQL Injection via unvalidated regexp filter argument in GraphQL query rewriter 0.4%
• CVE-2026-44840 High 7.5 Dgraph Vulnerable to DQL Injection via checkUserPassword GraphQL Query 0.5%
• CVE-2026-54061 Critical 9.1 Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import 0.5%
• CVE-2026-41492 Critical 9.8 Unauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/vars in Dgraph 3.1%
• CVE-2026-41327 Critical 9.1 Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field 0.5%
• CVE-2026-41328 Critical 9.1 Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field 0.4%
• CVE-2026-40173 Critical 9.4 Dgraph: Unauthenticated pprof endpoint leaks admin auth token 0.5%
• CVE-2026-34976 Critical 10.0 Dgraph Affected by Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing Authorization 2.1%
• CVE-2023-31135 Low 3.3 Dgraph Audit Log Encryption nonce reuse 0.2%