Ttaosdata

Products

Exploited and recent CVEs

• CVE-2026-62353 Medium 5.4 TDengine: Authenticated Out-of-Bounds Read in SQL Lexer tGetToken 0.4%
• CVE-2026-62351 High 7.5 TDengine: Unauthenticated Remote Denial of Service via Out-of-Bounds Read in transDecompressMsg 0.4%
• CVE-2026-62348 Medium 5.4 TDengine: KILL SSMIGRATE missing authorization lets low-privilege users interrupt shared-storage migrations 0.3%
• CVE-2026-62349 High 8.3 TDengine: Off-by-One Buffer Overflow 0.5%
• CVE-2026-62350 High 7.2 TDengine: UDF lead to RCE 0.5%
• CVE-2026-62355 Medium 5.4 TDengine: Standard User permission unexpect 0.2%
• CVE-2026-42542 High 7.5 TDengine has an integer underflow in uvConnMayGetUserInfo() allows unauthenticated remote crash (DoS) 0.6%
• CVE-2023-38502 Medium 6.5 TDengine Database Denial-of-Service 0.7%
• CVE-2023-34111 High 8.1 Command Injection Vulnerability in `Release PR Merged` Workflow in taosdata/grafanaplugin 4.0%