Known vulnerabilities in thingsboard
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-53676 | ThingsBoard contains a prototype pollution vulnerability which may lead to arbitrary code execution within a sandboxed… | 7.2 High | Jun 17, 2026 |
| CVE-2025-34281 | ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image… | 6.2 Medium | Oct 17, 2025 |
| CVE-2024-3270 | A vulnerability classified as problematic was found in ThingsBoard up to 3.6.2 | 3.8 Low | Apr 3, 2024 |