Arcadedata vulnerabilities
42 CVEs and advisories name Arcadedata as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-75841ArcadeDB before 26.8.1 Denial of Service via range()
- CVE-2026-75840ArcadeDB before 26.8.1 Arbitrary File Read via Unescaped Regex
- CVE-2026-75839ArcadeDB before 26.8.1 Information Disclosure via Cluster Endpoints
- CVE-2026-68578ArcadeDB before 26.7.3 Authentication Bypass via MCP Transport
- CVE-2026-67357ArcadeDB before 26.7.3 Information Disclosure via get_server_settings
- CVE-2026-67356ArcadeDB before 26.7.3 Privilege Escalation via JavaScript Trigger
- CVE-2026-67340ArcadeDB before 26.7.2 Remote Code Execution via Trigger Scripts
- CVE-2026-67344ArcadeDB before 26.7.2 Authentication Bypass via ALTER TYPE
- CVE-2026-67341ArcadeDB before 26.7.2 Authorization Bypass via SQL DEFINE FUNCTION
- CVE-2026-67343ArcadeDB before 26.7.2 Cluster Token Disclosure via GET /api/v1/server
- CVE-2026-67342ArcadeDB before 26.7.2 Authorization Bypass via Database Handlers
- CVE-2026-44221ArcadeDB: Cross-database authorization bypass and unsecured newly-created databases