ThingsBoard
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ThingsBoard | 2 | – | Jun 17, 2026 |
Exploited and recent CVEs
- CVE-2026-53676 ThingsBoard contains a prototype pollution vulnerability which may lead to arbitrary code execution within a sandboxed context by a user who can log in to the affected product with the tenant administ 0.6%
- CVE-2025-34281 Stored Cross-Site Scripting (XSS) in ThingsBoard 0.4%