| CVE-2026-59229 |
The Legacy Pipe receiver protocol (handshake / sendPipeData) uses a hardcoded SUPER_USER (root) identity when…
|
Not rated
|
Oct 21, 2026 |
| CVE-2026-59562 |
Missing authentication for critical function vulnerability in Apache IoTDB
|
Not rated
|
Oct 21, 2026 |
| CVE-2026-58663 |
An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from…
|
Not rated
|
Oct 21, 2026 |
| CVE-2026-44630 |
Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to…
|
Not rated
|
Aug 10, 2026 |
| CVE-2026-40452 |
Incorrect Authorization, Improper Access Control vulnerability in Apache IoTDB
|
Not rated
|
Jul 10, 2026 |
| CVE-2026-40009 |
Improper Privilege Management, Improper Access Control vulnerability in Apache IoTDB
|
Not rated
|
Jul 10, 2026 |
| CVE-2026-40008 |
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache IoTDB
|
Not rated
|
Jul 10, 2026 |
| CVE-2026-40007 |
Uncontrolled Recursion, Uncontrolled Resource Consumption vulnerability in Apache IoTDB
|
Not rated
|
Jul 10, 2026 |
| CVE-2026-40006 |
Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits or Throttling, Missing…
|
Not rated
|
Jul 10, 2026 |
| CVE-2026-40005 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB
|
Not rated
|
Jul 10, 2026 |
| CVE-2026-28564 |
Insufficient Session Expiration, Authentication Bypass by Capture-replay vulnerability in Apache IoTDB
|
Not rated
|
Jul 10, 2026 |
| CVE-2026-24013 |
Authentication Bypass by Spoofing vulnerability in Apache IoTDB
|
Not rated
|
Jul 6, 2026 |
| CVE-2026-24012 |
Uncontrolled Resource Consumption vulnerability in Apache IoTDB. Some interface fails to impose reasonable limits on…
|
Not rated
|
Jul 6, 2026 |
| CVE-2026-24014 |
Apache IoTDB DataNode’s internal RPC interface for creating Trigger instances uses the uploaded Trigger JAR name to…
|
Not rated
|
Jul 6, 2026 |
| CVE-2025-64152 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB
|
Not rated
|
Jun 26, 2026 |
| CVE-2025-55017 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB
|
Not rated
|
Jun 26, 2026 |
| CVE-2026-24713 |
Improper Input Validation vulnerability in Apache IoTDB
|
Not rated
|
Mar 9, 2026 |
| CVE-2026-24015 |
A vulnerability in Apache IoTDB
|
Not rated
|
Mar 9, 2026 |
| CVE-2025-48392 |
A vulnerability in Apache IoTDB
|
Not rated
|
Sep 24, 2025 |
| CVE-2025-48459 |
Deserialization of Untrusted Data vulnerability in Apache IoTDB
|
Not rated
|
Sep 24, 2025 |
| CVE-2025-26864 |
Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File…
|
Not rated
|
May 14, 2025 |
| CVE-2024-24780 |
Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB
|
Not rated
|
May 14, 2025 |
| CVE-2023-46226 |
Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2
|
Not rated
|
Jan 15, 2024 |
| CVE-2023-51656 |
Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through…
|
Not rated
|
Dec 21, 2023 |
| CVE-2023-24831 |
Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana…
|
Not rated
|
Apr 17, 2023 |